CVE-2024-8444 — Download Manager < 3.3.00 - Contributor+ Stored XSS
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.
Published: 2024-10-30 · CVSS: 5.4 · CVSS 3.1
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7