CVE-2021-23174

Severity

LOW

CVSS

3.4

EPSS

0.83853

Risk score

42.95

CISA KEV

PoC

Published

2022-01-28

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2021-10284, GHSA-2523-V9J2-G44C

Products

WP Chill:Download Monitor n/a ≤4.4.6

Sources

euvd EUVD-2021-10284

Description

Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0].

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10284
https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-persistent-cross-site-scripting-xss-vulnerability?_s_id=cve