Lucene search
PRIOn knowledge basePRION:CVE-2023-0380HistoryFeb 21, 2023 - 9:15 a.m.
Cross site scripting
2023-02-2109:15:00
PRIOn knowledge base
www.prio-n.com
3
easy digital downloads
wordpress plugin
stored cross-site scripting
0.001 Low
EPSS
Percentile
23.3%
The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| easy_digital_downloads | lt | 3.1.0.5 |
Related
cve
cve
CVE-2023-0380
2023-02-21 09:15:12
wpvulndb
wpvulndb
Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS
2023-01-30 00:00:00
cvelist
cvelist
CVE-2023-0380 Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS
2023-02-21 08:50:35
nvd
nvd
CVE-2023-0380
2023-02-21 09:15:12
wpexploit
wpexploit
Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS
2023-01-30 00:00:00
wordfence
wordfence