Unrated

The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-adm...

CVE-2018-5213 First seen on SecPulse Jan 5, 2018

Original description The description as published by the source.

The Simple Download Monitor plugin before 3.5.4 for WordPress has XSS via the sdm_upload (aka Downloadable File) parameter in an edit action to wp-admin/post.php.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com
report github.com
report github.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jan 5, 2018
First seen on SecPulse: Jan 5, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50