Low severity3.4NVD Advisory· Published Jan 28, 2022· Updated Jun 17, 2026
CVE-2021-23174
CVE-2021-23174
Description
Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0].
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:wpchill:download_monitor:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:wpchill:download_monitor:*:*:*:*:*:wordpress:*:*range: <4.4.7
- (no CPE)range: n/a
- Range: <=4.4.6
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.