← CVE Intelligence

CVE-2022-2367

WSM Downloader <= 1.4.0 - Domain Name Restriction Bypass PUBLISHED

Description (CNA)

The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of good "link" parameter validation

Affected (CNA)

Vendor / productVersions
Unknown / WSM Downloaderaffected 1.4.0 through 1.4.0

CWE

CWE-639

References

ADP enrichment

CVE

No English description supplied.