WordPress Plugin Vulnerabilities

Download Manager <= 2.2.2 - admin.php cid Parameter XSS

Description

The WordPress Download Manager WordPress plugin was affected by an admin.php cid Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
download-manager
Fixed in 2.2.3

References

URL
https://packetstormsecurity.com/files/#112708/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
ec0c6d34-515c-4d6b-8ee0-af0f45b9705a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-16
Title
MJ Contact us <= 5.2.3 - Reflected Cross-Site Scripting
Published
2026-05-07
Title
NMR Strava activities < 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Published
2024-09-23
Title
WP Abstracts < 2.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2025-06-30
Title
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.3.67 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
Published
2025-02-03
Title
Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS