Exploit Title: Download Manager Cross-Site Scripting Date: 2022-06-16 Exploit Author : Andrea Bocchetti Vendor Homepage : https://wordpress.org/plugins/download-manager/ Version : <= 3.2.43 Tested on: windows CVE : CVE-2022-2101 ######## Description ######## # 1-) Login in the plugin page # 2-) add the xss payload in the field "Insert URL" # 3-) Click on the link , the JS code will be interpreted.