CVE-2022-45836

moderate-risk

Published 2023-04-18

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions.

Do I need to act?

5.0% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.1/10 High

NETWORK / LOW complexity

Download Manager

W3Eden

Third Party Advisory https://patchstack.com/database/vulnerability/download-manager/wordpress-downloa...

/ 100

moderate-risk

Severity 25/34 · High

Exploitability 8/34 · Low

Exposure 5/34 · Minimal