Aller au contenu
Se connecter
6.1 Moyenne

CVE-2024-8703 The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in…

Description

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs.

Produits et versions touchés

Produit Versions touchées Corrigé en
Z-Downloads 1.11 premières → < 1.11.6 1.11.6

Autres CVE de Z-Downloads

Les 3 CVE de Z-Downloads →
CVE-2024-8673 The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of… 9.1 Critique CVE-2024-8699 The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege… 7.2 Élevée
Suivre cette CVE