← All advisories

Medium severity6.1NVD Advisory· Published Oct 21, 2020· Updated Jun 17, 2026

CVE-2020-27344

CVE-2020-27344

Description

The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/cm-download-managerdescription
Cminds/Cm Download Manager
cpe:2.3:a:cminds:cm_download_manager:*:*:*:*:*:wordpress:*:*
Range: <2.8.0
WordPress/Cm Download Managerllm-fuzzy
Range: <2.8.0
Package: https://wordpress.org/plugins/cm-download-manager

Patches

Vulnerability mechanics

References

2

gist.github.com/qwebee/da79c6a9fa982c3c40988a1e0598c0d9nvdExploitThird Party Advisory
wordpress.org/plugins/cm-download-manager/nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.