Skip to content
fr Sign in
4.8 Medium

CVE-2024-8284 The Download Manager WordPress plugin before 3.2.99 does not sanitise and escape some of its settings, which could allow…

Description

The Download Manager WordPress plugin before 3.2.99 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Affected products and versions

Product Affected versions Fixed in
Download Manager 3.2 earliest → < 3.2.99 3.2.99

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Download Manager

The 19 CVEs of Download Manager →
CVE-2026-86611 The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF… 4.3 Medium CVE-2026-86610 The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before… 6.4 Medium CVE-2026-86609 The Download Manager WordPress plugin before 7.5.6 does not sanitise and escape data submitted through its… 8.8 High CVE-2026-14292 The Download Manager WordPress plugin before 3.3.66 does not properly escape a package's title before outputting it in… 5.4 Medium
Track this CVE