XSS Vulnerability in Easy Digital Downloads Recommended Products Extension for WordPress
CVE-2015-9523

6.1MEDIUM

Key Information:

Vendor
Wordpress
Status
Easy Digital Downloads
Recommended Products
Vendor
CVE Published:
23 October 2019

Summary

The Easy Digital Downloads Recommended Products extension for WordPress contains a Cross-Site Scripting (XSS) vulnerability due to improper handling of the add_query_arg function. This misconfiguration allows attackers to inject malicious scripts into the web application, potentially compromising the security of the site and its users. It is crucial for users to update to the patched versions to mitigate risks.

References

https://web.archive.org/web/20160921003517/https://easydi...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.