CVE-2016-10964
The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header.
CVSS 3.1 · 6.1 Medium
EPSS 1.0%
KEV · Not listed
Vendors
Products