← Database

CVE-2024-8703

MEDIUM CVSS: 6.1 Published: 2025-05-15 Modified: 2026-06-17

Description

The Z-Downloads WordPress plugin before 1.11.6 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks when accessing share URLs.

Affected Platforms

Urbanbase Z-Downloads

Weakness Type

CWE-79

References