Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2013-7319 — Cross-site Scripting in Download Manager

CWE-79 — Cross-site Scripting4 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
8.2%
top 7.77%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
W3eden Download Manager
Timeline
PublishedFeb 6
Latest updateMay 13

Description

Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-wpcr-pmxc-jm94: Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2↗2022-05-13
▶
CVEList
CVE-2013-7319: Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2↗2014-02-06
▶

💥Exploits & PoCs

1
Exploit-DB
WordPress Plugin Download Manager Free & Pro 2.5.8 - Persistent Cross-Site Scripting↗2013-12-08
▶
CVE-2013-7319 — Cross-site Scripting | cvebase