Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions < 1.68.6). Vvulnerable parameters &download_path, &download_path_url, &download_page_url.
Publication date: Fri, 18 Mar 2022 23:15:00 +0000