CVE-2013-2697

Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Score

CVSS 2.0 6.8 Medium

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2013-04-19

Last modified

2024-09-16

Weaknesses

CWE-352

Affected products

• Wp-downloadmanager (Lesterchan)

References

• http://secunia.com/advisories/52863
• http://wordpress.org/extend/plugins/wp-downloadmanager/changelog/