CVE Database /
CVE-2015-9528
CVE · Medium
CVE-2015-9528 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 2.3.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2015-9528
|
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 2.3.7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 2.3.7
|
2.3.7 |
2019-10-23 |
—
|
CVE-2015-9528
The Easy Digital Downloads plugin for WordPress through version 2.3.6 contains a cross-site scripting vulnerability caused by improper use of the add_query_arg function. This flaw affects multiple version series including 1.8.x, 1.9.x, 2.0.x, 2.1.x, 2.2.x, and 2.3.x, with each series having a specific patched version. Users should update to version 2.3.7 or later to eliminate the vulnerability.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings