Description
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Download Manager | < 3.3.00 | 3.3.00 |
References
- https://wpscan.com/vulnerability/bf2f5aa8-a161-43ff-a6ee-8603aaba8012/ exploit vdb-entry technical-description