CVE-2020-27344

The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.