Get Demo
The Download Manager WordPress plugin before 3.3.00 doesnt sanitize some of its shortcode parameters, leading to cross site scripting.