Threats tagged 'ghsa-5q2v-mjvx-rgcw'

The Download Manager plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'not_found' parameter. This vulnerability affects all versions up to and including 3.3.58. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. The vulnerability arises from insufficient input sanitization and output escaping.