Shahjada Download Manager vulnerabilities

7 vulnerabilities

Known vulnerabilities in Shahjada Download Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2025-63070shahjadadownload manager+1
EPSS score
0.26%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.32.
4.3CVE-2025-60093shahjadadownload manager+1
EPSS score
0.14%
Cross-Site Request Forgery (CSRF) vulnerability in Shahjada Download Manager download-manager allows Cross Site Request Forgery.This issue affects Download Manager: from n/a through <= 3.3.24.
5.3CVE-2025-60092shahjadadownload manager+1
EPSS score
0.31%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.25.
6.3CVE-2024-56217shahjadadownload manager+2
EPSS score
0.30%
Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.03.
6.4CVE-2026-39615shahjadadownload manager+1
EPSS score
0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Download Manager download-manager allows Stored XSS.This issue affects Download Manager: from n/a through <= 3.3.53.
5.3CVE-2026-39676shahjadadownload manager+1
EPSS score
0.26%
Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.52.
5.3CVE-2026-94405shahjadadownload manager+1
EPSS score
0.33%
Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This issue affects Download Manager: from n/a through 3.3.71.