Lucene search
K

4 matches found

OSV
OSV
added 2021/10/21 8:15 p.m.1 views

CVE-2021-39354

The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $startdate and $enddate parameters found in the /includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2...

4.8CVSS5.8AI score0.0031EPSS
Exploits2References3
NVD
NVD
added 2021/10/21 8:15 p.m.9 views

CVE-2021-39354

The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $startdate and $enddate parameters found in the /includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2...

4.8CVSS0.0031EPSS
Exploits2References3
Prion
Prion
added 2021/10/21 8:15 p.m.8 views

Cross site scripting

The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $startdate and $enddate parameters found in the /includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2...

3.5CVSS5AI score0.0031EPSS
Exploits2References3Affected Software1
CNNVD
CNNVD
added 2021/10/21 12:0 a.m.2 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Easy Digital Downloads, which ca...

4.8CVSS5.5AI score0.0031EPSS
Exploits2References5
Rows per page
Query Builder