5.4
Medium
CVE-2024-8444 The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross…
Description
The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross site scripting.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| download_manager 3.3 | earliest → < 3.3.00 | 3.3.00 |
| Download Manager 3.3 | earliest → < 3.3.00 | 3.3.00 |