Beveiligingsadvies

CVE-2024-8703

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-15 20:07:18
Laatst bijgewerkt 2025-05-17 03:05:42
Toegewezen door WPScan
CVSS-score 6.1
Status PUBLISHED

Beschrijving

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs.