PT-2023-16229 · WordPress · Easy Digital Downloads

Lana Codes

·

CVE-2023-0380

·

Publicado

2023-02-21

·

Atualizado

2023-02-28

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Easy Digital Downloads WordPress plugin versions prior to 3.1.0.5
Description The issue concerns the lack of validation and escaping of certain block options in the Easy Digital Downloads WordPress plugin, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Recommendations For versions prior to 3.1.0.5, update to version 3.1.0.5 or later to resolve the issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2023-0380

Produtos afetados

Easy Digital Downloads