Description (CNA)
The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://wordpress.org/plugins/dwnldr/#developers
- https://rastating.github.io/dwnldr-1-0-stored-xss-disclosure/
ADP enrichment
No English description supplied.