CVE-2017-20097

LOW

WP-Filebase Download Manager Plugin <3.4.4 - XSS

Title source: llm
STIX 2.1

Description

A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely.

References (2)

Core 2
Core References
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/fulldisclosure/2017/Feb/78
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.97370

Scores

CVSS v3 3.5
EPSS 0.0055
EPSS Percentile 41.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-80 CWE-79
Status published
Products (1)
wp-filebase_download_manager_project/wp-filebase_download_manager 3.4.4
Published Jun 24, 2022
Tracked Since Feb 18, 2026