Plugin-planet

Simple Download Counter

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-46240

  • EPSS 0.02%
  • Published 22.04.2025 09:53:27
  • Last modified 29.04.2025 18:52:17

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Simple Download Counter allows Stored XSS. This issue affects Simple Download Counter: from n/a through 2.2.

5.4

CVE-2023-4838

  • EPSS 0.08%
  • Published 09.09.2023 02:15:46
  • Last modified 21.11.2024 08:36:04

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes lik...