Files
CVEs-PoC/2020/CVE-2020-24145.md
T
2024-05-25 21:48:12 +02:00

709 B

CVE-2020-24145

Description

Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action.

POC

Reference

No PoCs from references.

Github