CVE-2021-24969: Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site Scripting
The WordPress Download Manager WordPress plugin before 3.2.22 does not sanitise and escape Template data before outputting it in various pages (such as admin dashboard and frontend). Due to the lack of authorisation and CSRF checks in the wpdmsavetemplate AJAX action, any authenticated users such as subscriber is able to call it and perform Cross-Site Scripting attacks
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24969?
CVE-2021-24969 is classified as a medium severity vulnerability affecting the WordPress Download Manager plugin.
How do I fix CVE-2021-24969?
To fix CVE-2021-24969, you should update the WordPress Download Manager plugin to version 3.2.22 or later.
What are the risks associated with CVE-2021-24969?
The risks associated with CVE-2021-24969 include potential unauthorized access and exploitation due to unvalidated input leading to cross-site scripting attacks.
Which versions of the WordPress Download Manager are affected by CVE-2021-24969?
CVE-2021-24969 affects all versions of the WordPress Download Manager plugin before 3.2.22.
What actions are vulnerable due to CVE-2021-24969?
The wpdm_save_template AJAX action is vulnerable in CVE-2021-24969, allowing for unauthorized modifications without proper checks.