{"uuid": "a4126297-c001-4949-af58-20a4aa2e63ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2101", "type": "seen", "source": "https://t.me/hacking_Attack/58350", "content": "Exploit Collector\nWordPress Download Manager 3.2.43 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-uXp9StI5Rh0/WWlvYIMdqaI/AAAAAAAAIOg/mHe50EJovPcz8di_9Up4vC4YPRAZ9BUbwCLcBGAs/s1600/h55.png \nWordPress Download Manager plugin versions 3.2.43 and below suffer from a cross site scripting vulnerability.\n\nSHA-256 | c5e010f3009e39b7db11c52ad43c84317ef6588fbfb45a6713c6d0812c0cf403\n\nDownload\nExploit Title: Download Manager Cross-Site Scripting\nDate: 2022-06-16\nExploit Author :  Andrea Bocchetti\nVendor Homepage : https://wordpress.org/plugins/download-manager/\nVersion : <=\nTested on: windows\nCVE :  CVE-2022-2101\n\n######## Description ########\n# 1-) Login in the plugin page\n# 2-) add the xss payload in the field \"Insert URL\"\n# 3-) Click on the link , the JS code will be interpreted.\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:35.393614Z"}