WordPress Plugin Vulnerabilities
Download Manager < 3.2.44 - Unauthenticated Reflected Cross-Site Scripting
Description
The plugin does not escape a generated URL before outputting it back in an attribute of the login page made by the plugin, leading to Reflected Cross-Site Scripting, which is only exploitable against unauthenticated users
Proof of Concept
On the login page from the plugin (ie where the [wpdm_login_form] is embed), append ?a"><script>alert(/XSS/)</script> e.g: against an unauthenticated user, https://example.com/wpdm-login/?a"><script>alert(/XSS/)</script>
Affects Plugins
Fixed in version 3.2.44
Classification
Miscellaneous
Timeline
Publicly Published
2022-06-27 (about 7 months ago)
Added
2022-06-27 (about 7 months ago)
Last Updated
2022-06-27 (about 7 months ago)