CVE-2020-24146

Mô tả

Tham khảo

• secwx/research · Third Party Advisory
• wordpress.org/plugins/cm-download-manager · Release Notes

Lỗ hổng khác của cm download manager

• CVE-2024-1962CAO 8.8The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged …
• CVE-2024-1232TRUNG BÌNH 4.8The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged …
• CVE-2024-1231TRUNG BÌNH 6.8The CM Download Manager WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged …
• CVE-2022-3076CAO 7.2The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any…
• CVE-2020-24145TRUNG BÌNH 6.1Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attac…