CVE-2021-23174

보통 4.8CVE-2021-23174 · Published 28/01/2022 · updated 17/06/2026

요약

CVE-2021-23174은(는) download monitor (wpchill)에 영향을 주는 보통 (CVSS 4.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 83.9%, 전체 취약점의 99.7%보다 높음.
조치: 4.4.7 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
download monitor wpchill	`< 4.4.7`	`4.4.7`

Description

Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0].

References

patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-persistent-cross-site-scripting-xss-vulnerability

download monitor의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

download monitor

wpchill

< 4.4.7

4.4.7

download monitor의 다른 취약점

모두 보기 →