nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-34658 CVE-2022-34658
MEDIUM
WordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
Record summary
CVE-2022-34658 has a selected CVSS score of 5.4 (medium).
Description
Multiple Authenticated (contributor+) Persistent Cross-Site Scripting (XSS) vulnerabilities in W3 Eden Download Manager plugin <= 3.2.48 at WordPress.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 20, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Download Manager (WordPress plugin)Browse W3 Eden, Inc. / Download Manager (WordPress plugin) | CVE List | <= 3.2.48 to ≤ 3.2.48 | affected |
References
3patchstack.comConfirmation
https://patchstack.com/database/vulnerability/download-manager/wordpress-download-manager-plugin-3-2-48-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities wordpress.orgConfirmation
https://wordpress.org/plugins/download-manager