Skip to content
Sign in
6.1 Medium

CVE-2024-8703 The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in…

Description

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs.

Affected products and versions

Product Affected versions Fixed in
Z-Downloads 1.11 earliest → < 1.11.6 1.11.6

Other CVEs of Z-Downloads

The 3 CVEs of Z-Downloads →
CVE-2024-8673 The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of… 9.1 Critical CVE-2024-8699 The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege… 7.2 High
Track this CVE