Input validation vulnerability in Download Manager 3.2.70

The Download Manager plugin for WordPress, up to version 3.2.70, is vulnerable to a type of attack called Stored Cross-Site Scripting. In this attack, an attacker with contributor-level or higher permissions can inject malicious scripts into pages. When a user visits the page, the scripts will be executed, potentially exposing the user to malicious activity. This is caused by the plugin not properly sanitizing and escaping user input.