Vulnerabilities > Tipsandtricks HQ > Simple Download Monitor > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-11-08 CVE-2021-24693 Unspecified vulnerability in Tipsandtricks-Hq Simple Download Monitor
The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
network
low complexity
tipsandtricks-hq
critical
9.0