CVE Database /
CVE-2024-0659
CVE · Medium
CVE-2024-0659 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.2.7
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-0659
|
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.2.7 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 3.2.7
|
3.2.7 |
2024-02-02 |
—
|
CVE-2024-0659
The Easy Digital Downloads plugin versions before 3.2.7 contain a Cross Site Scripting vulnerability that permits attackers to inject malicious scripts into a website, potentially enabling redirects, advertisements, and arbitrary HTML content to execute when visitors access the site. This flaw was identified by emad and has been resolved in version 3.2.7 and later releases. Users should upgrade to version 3.2.7 or higher to address this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings