2 matches found
CVE-2024-0659: Improper Neutralization of Input During Web Page Generation
The Easy Digital Downloads – Sell Digital Files eCommerce Store & Payments Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the variable pricing option title in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This...
5.5CVSS6AI score0.00398EPSS
SaveExploits0References3
PT-2024-15726
Name of the Vulnerable Software and Affected Versions Easy Digital Downloads – Sell Digital Files plugin for WordPress versions up to, and including, 3.2.6 Description The issue is related to Stored Cross-Site Scripting via the variable pricing option title due to insufficient input sanitization...
5.5CVSS6AI score0.00398EPSS
SaveExploits0References6
20