Lucene search
PvdlWPVDB-ID:8165A99F-C5AB-43A8-8788-FA9AA22C62AAHistoryJan 16, 2015 - 12:00 a.m.
CM Download Manager < 2.0.7 - CSRF to Cross-Site Scripting
2015-01-1600:00:00
pvdl
wpscan.com
12
EPSS
0.007
Percentile
80.6%
The lack of CSRF check and sanitisation could allow attackers to perform CSRF attacks against logged in administrators, and set a Cross-Site Scripting payload via addons_title parameter in the CMDM_admin_settings page.
Related
packetstorm
packetstorm
WordPress CM Download Manager 2.0.6 XSS / CSRF
2014-12-02 00:00:00
prion
prion
Cross site request forgery (csrf)
2014-12-05 15:59:00
cvelist
cvelist
CVE-2014-9129
2014-12-05 15:00:00
securityvulns
securityvulns
cve
cve
CVE-2014-9129
2014-12-05 15:59:04
patchstack
patchstack
WordPress Download Manager Plugin <= 2.0.6 - Multiple CSRF and XSS
2014-11-28 00:00:00
nvd
nvd
CVE-2014-9129
2014-12-05 15:59:04