Vulnerability · Published Feb 21, 2022 · Assigned by WPScan
CVE-2021-25069WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS
High 8.8
In plain English
A high-severity SQL injection in Download Manager from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)1.5%top 25.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Download Manager WordPress plugin before 3.2.34 does not sanitise and escape the package_ids parameter before using it in a SQL statement, leading to a SQL injection, which can also be exploited to cause a Reflected Cross-Site Scripting issue
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Download Manager | 3.2.34 – before 3.2.34 |
Weakness: CWE-89
References
- https://wpscan.com/vulnerability/4ff5e638-1b89-41df-b65a-f821de8934e8 x_refsource_MISC
- https://plugins.trac.wordpress.org/changeset/2656086 x_refsource_CONFIRM