← Back to CVE List

CVE-2019-15889

Published: 2019-09-03T18:15Z
Last Modified: 2025-03-21T16:07Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt