Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy), CVE-2022-0706

CVE, Research URL: CVE-2022-0706
Home page URL: Security reports for Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Application: Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy)
Published on: Apr 18, 2022
Research Description: The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Affected versions: max 2.5.8.
Status: vulnerable

Easy Digital Downloads – Sell Digital Files &amp; Subscriptions (eCommerce Store + Payments Made Easy), CVE-2022-0706