Now officially on WordPress.org

CVE Database / CVE-2012-4768

CVE

CVE-2012-4768 — Download Monitor [download-monitor] < 3.3.5.9

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2012-4768 Download Monitor [download-monitor] < 3.3.5.9 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 3.3.5.9 3.3.5.9 2012-08-30 —

CVE-2012-4768

The Download Monitor plugin versions prior to 3.3.5.9 contain a cross-site scripting flaw in the "dlsearch" parameter due to insufficient input sanitization. Attackers can inject malicious scripts that execute in users' browsers within the site context, potentially allowing them to steal session cookies and authentication tokens or perform other harmful actions. Users should upgrade to version 3.3.5.9 or later to resolve this vulnerability.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings