CVE-2024-8284
The Download Manager WordPress plugin before 3.2.99 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Vendor
Product
CWE
Yayın Tarihi
2025-05-15 20:15:58
Güncelleme
2025-06-12 15:29:52
Source Identifier
contact@wpscan.com
KEV Date Added
-