Medium severity6.1NVD Advisory· Published Jul 7, 2017· Updated May 13, 2026
CVE-2017-2216
CVE-2017-2216
Description
Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
1- Range: prior to version 2.9.50
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- plugins.trac.wordpress.org/changeset/1650075/nvdIssue TrackingPatchVendor Advisory
- wordpress.org/plugins/download-manager/nvdPatchRelease NotesVendor Advisory
- jvn.jp/en/jp/JVN79738260/index.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.