WordPress WP-Filebase Download Manager plugin version 3.4.4 suffers from a cross site scripting vulnerability.