Login Request a demo
Medium severity · published Jul 18, 2022
CVE-2022-2101
Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting
5.4
CVSS
1.1%
EPSS
No
On KEV
Description
The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter in versions up to, and including, 3.2.46 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor level permissions and above to inject arbitrary web scripts on the file's page that will execute whenever an administrator accesses the editor area for the injected file page.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Download Manager · codename065
through 3.2.46 · source: vendor, NVD
Affected product
DM
Download Manager
codename065
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-2101
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-2101
Exploit
https://medium.com/%40andreabocchetti88/download-manager-3-2-43-contributor-cross-site-scripting-fa4970fba45c
Exploit
https://packetstormsecurity.com/files/167573/
Patch
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2750339%40download-manager&new=2750339%40download-manager&sfp_email=&sfph_mail=
www.wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/b399929a-db33-419f-9218-b86ee88a9f1a?source=cve
Third Party Advisory
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2101
More from Download Manager
8.8
CVE-2025-3404
Download Manager <= 3.3.12 - Authenticated (Author+) Arbitrary File Deletion
8.8
CVE-2022-2436
Download Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization
8.1
CVE-2025-1785
Download Manager <= 3.3.08 - Authenticated (Author+) Path Traversal to Limited File Overwrite
7.5
CVE-2024-2098
Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary
7.3
CVE-2025-15364
Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword