CVE-2026-97338 | codename065 Download Manager Plugin up to 3.3.70 on WordPress shortcode display name cross site scripting

October 2, 2026 Yanac

A vulnerability described as problematic has been identified in codename065 Download Manager Plugin up to 3.3.70 on WordPress. Affected by this vulnerability is an unknown functionality of the component shortcode Handler. Executing a manipulation of the argument display name can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-97338. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More