https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:40:04.242996+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1985 CVE-2022-1985 — Download Manager <= 3.2.42 - Reflected Cross-Site Scripting 2026-10-08T10:40:04.257930+00:00

Affected: codename065 Download Manager

The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. This is due to insufficient input sanitization and output escaping on the 'frameid' parameter found in the ~/src/Package/views/shortcode-iframe.php file.