Exploit Title: Download Manager Cross-Site Scripting
Date: 2022-06-16
Exploit Author : Andrea Bocchetti
Vendor Homepage : https://wordpress.org/plugins/download-manager/
Version : < = 3.2.43
Tested on: windows
CVE : CVE-2022-2101######## Description ########
# 1-) Login in the plugin page
# 2-) add the xss payload in the field "Insert URL"
# 3-) Click on the link , the JS code will be interpreted.
Google Sues App Developers Over Fake Crypto… April 8, 2024 Apr 08, 2024NewsroomInvestment Scam / Mobile Security Google has filed… (8)
Red Hat Security Advisory 2024-1687-03 – Torchsec April 9, 2024 The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_1687.jsonRed Hat officially shut… (8)Debian Security Advisory 5664-1 – Torchsec April 18, 2024 -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA512- -------------------------------------------------------------------------Debian Security Advisory DSA-5664-1 security@debian.orghttps://www.debian.org/security/… (8)Open Source Medicine Ordering System 1.0 SQL… April 8, 2024 # Exploit Title : Open Source Medicine Ordering System v1.0… (7)
Gloss