WP-DownloadManager Plugin < 1.61 - Cross-Site Scripting
mediumCross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
- CVSS:
- 6.1
- Affected:
- up to 1.61
- Fixed in:
- 1.61
- Disclosed:
- Apr 8, 2013