CVE Database /
CVE-2022-4476
CVE · Medium
CVE-2022-4476 — Download Manager [download-manager] < 3.2.62
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4476
|
Download Manager [download-manager] < 3.2.62 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 3.2.62
|
3.2.62 |
2022-12-20 |
—
|
CVE-2022-4476
The WordPress Download Manager plugin before version 3.2.62 contains a cross-site scripting vulnerability discovered by Lana Codes that allows attackers to inject malicious scripts into websites. An attacker could exploit this flaw to execute arbitrary JavaScript code, redirects, advertisements, or other HTML content that would run in the browsers of site visitors. The vulnerability has been patched in version 3.2.62 and users should upgrade to this version or later to protect their sites.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings