/Vulnerability Library

WordPress Download Manager <= 3.2.59 - Reflected XSS

CVE-2022-45836
Verified

Description

W3 Eden, Inc. Download Manager plugin <= 3.2.59 contains a reflected cross-site scripting caused by insufficient input sanitization, letting attackers execute scripts in the context of the victim's browser, exploit requires attacker to craft a malicious link.

Severity

High

Published Date

February 6, 2026

Template Author

shivam kamboj

CVE-2022-45836.yaml
7.5Severity

CVSS Metrics

References

https://nvd.nist.gov/vuln/detail/CVE-2022-45836https://patchstack.com/database/wordpress/plugin/download-manager/vulnerability/wordpress-download-manager-plugin-3-2-59-reflected-cross-site-scripting-xss-vulnerability

Remediation Steps

Update to the latest version of the plugin where the vulnerability is fixed.