Avenir-soft Direct Download <= 1.0 - Cross-Site Scripting
mediumThe avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin.
- CVSS:
- 6.5
- Affected:
- up to 1.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 6, 2015