Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy), CVE-2015-9505
- CVE, Research URL
- Home page URL
- Application
- Published on
- Oct 23, 2019
- Research Description
- The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.
- Affected versions
-
max 2.3.7.
- Status
-
vulnerable