CVE Database /
CVE-2013-7319
CVE
CVE-2013-7319 — Download Manager [download-manager] < 2.5.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2013-7319
|
Download Manager [download-manager] < 2.5.9 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Unknown
|
< 2.5.9
|
2.5.9 |
2013-12-08 |
—
|
CVE-2013-7319
The Download Manager plugin before version 2.5.9 contains a persistent cross-site scripting vulnerability in its title input field, which fails to properly sanitize user input. An attacker could exploit this flaw to inject malicious scripts that would be stored and executed for other users viewing the affected content. Users should upgrade to version 2.5.9 or later to address this vulnerability.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings