CVE-2022-0706
18.04.2022, 18:15
The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| awesomemotive | easy_digital_downloads | 𝑥 < 2.11.6 |
𝑥
= Vulnerable software versions