Description
(CVE-2025-3056) WordPress下载管理器插件 SVG文件上传跨站点脚本漏洞
(CVE-2025-3056) WordPress下载管理器插件 SVG文件上传跨站点脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/download-manager/download-manager-3312-authenticated-author-stored-cross-site-scripting-via-svg-file-upload
https://wpscan.com/vulnerability/cfad6000-847b-44d2-9d52-33f11026c937/
https://www.cybersecurity-help.cz/vdb/SB2025050641
https://patchstack.com/database/Wordpress/Plugin/download-manager/vulnerability/wordpress-download-manager-plugin-3-3-51-cross-site-scripting-xss-vulnerability
https://www.cve.org/CVERecord?id=CVE-2025-3056
https://strobes.co/vi/cve/CVE-2025-3056
https://euvd.enisa.europa.eu/vulnerability/CVE-2025-3056
https://cve.imfht.com/detail/CVE-2025-3056?lang=en