PT-2023-14776 · W3 Eden · Download Manager
CVSS v3.1
6.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
W3 Eden, Inc. Download Manager plugin versions 3.2.59 and earlier
Description
The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This vulnerability can be exploited without authentication, allowing for reflected cross-site scripting attacks.
Recommendations
For versions 3.2.59 and earlier, update to a version later than 3.2.59 to resolve the issue. As a temporary workaround, consider restricting access to the Download Manager plugin to minimize the risk of exploitation.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Download Manager