Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-07-07	CVE-2020-24145	Cross-site Scripting vulnerability in Cminds CM Download Manager 2.7.0 Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action. network low complexity cminds CWE-79	6.1
2020-10-21	CVE-2020-27344	Cross-site Scripting vulnerability in Cminds CM Download Manager The cm-download-manager plugin before 2.8.0 for WordPress allows XSS. network low complexity cminds CWE-79	6.1