Mikejolley: >> Download Monitor >> 1.0.1 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262.
CVSS Score
4.3
EPSS Score
0.003
Published
2013-08-09
Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the p parameter.
CVSS Score
4.3
EPSS Score
0.003
Published
2013-08-09