CVE-2024-6692

🗓️ 12 Aug 2024 13:38:39Reported by GoogleType

osv

osv🔗 osv.dev

CVE-2024-6692: Stored XSS in Easy Digital Downloads via Agreement Text; multisite and unfiltered_html disabled.

Reporter	Title	Published	Views	Family All 9
CVE	CVE-2024-6692	10 Aug 202402:01	–	cve
Cvelist	CVE-2024-6692 Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text	10 Aug 202402:01	–	cvelist
EUVD	EUVD-2024-47739	3 Oct 202520:07	–	euvd
NVD	CVE-2024-6692	12 Aug 202413:38	–	nvd
Patchstack	WordPress Easy Digital Downloads Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)	12 Aug 202400:00	–	patchstack
Patchstack	WordPress Easy Digital Downloads plugin <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text vulnerability	12 Aug 202402:57	–	patchstack
RedhatCVE	CVE-2024-6692	23 May 202508:20	–	redhatcve
Vulnrichment	CVE-2024-6692 Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text	10 Aug 202402:01	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (August 5, 2024 to August 11, 2024)	15 Aug 202417:14	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e54d5ab2-40ba-4ad8-9a77-44aba37f0283
plugins	www.plugins.trac.wordpress.org/changeset/3131805/easy-digital-downloads/tags/3.3.3/includes/checkout/template.php

04 May 2026 08:48Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.13.1

EPSS0.00209

cross site scripting agreement text vulnerability wordpress plugin vulnerability multisite affected administrator access required unfiltered html