CVE-2022-0706 — Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site Scripting
The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform …
Published: 2022-04-18 · CVSS: Unscored
The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the Logs, which could allow high privilege users to perform Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7