CVE-2019-15889

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date]…

Medium · published September 3, 2019

CVSS v3.0
6.1
EPSS
11%
Percentile
96.0
In the wild
Unconfirmed
What it is

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.11375 · 96.0th percentile
Published
2019-09-03T17:07Z
EPSS history
Timeline
  • 03 SEP 17:07Z
    The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date]…
    cvelistv5