vulnwire
6.1med

CVE-2022-1985

Download Manager <= 3.2.42 - Reflected Cross-Site Scripting

Published 4 y ago · modified 4 mo ago · JSON

CVSS
6.1
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 68%
Public exploits
0
none known

The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. This is due to insufficient input sanitization and output escaping on the 'frameid' parameter found in the ~/src/Package/views/shortcode-iframe.php file.

Exploit prediction (EPSS)

1.20% probability of exploitation in the next 30 days, higher than 68% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CNA3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CNA3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD3.16.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

  • codename065 Download Manager

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

  • wordfence.com /threat-intel/vulnerabilities/id/79fcf18e-39f7-42f2-90e4-3a5bac3382e0?source=cve · x_transferred
  • wordpress.org /plugins/download-manager/#developers · x_transferred
  • plugins.trac.wordpress.org /changeset?sfp_email=&sfph_mail=&reponame=&old=2736071%40download-manager&new=2736071%40do · x_transferred
  • wordfence.com /vulnerability-advisories/#CVE-2022-1985 · x_transferred
  • wordfence.com /blog/2022/06/security-vulnerability-download-manager-plugin/ · x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.