WP-Filebase Download Manager Plugin cross site scriting
CVE-2017-20097

3.5LOW

Key Information:

Vendor

WordPress
Status
WP-filebase Download Manager Plugin
Vendor
CVE Published:
24 June 2022

What is CVE-2017-20097?

A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely.

Affected Version(s)

WP-Filebase Download Manager Plugin 3.4.4

References

http://seclists.org/fulldisclosure/2017/Feb/78
x_refsource_MISC
https://vuldb.com/?id.97370
x_refsource_MISC

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yorick Koster
.
CVE-2017-20097 : WP-Filebase Download Manager Plugin cross site scriting