CVE-2023-51684: WordPress Easy Digital Downloads Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) allows Stored XSS.This issue affects Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy): from n/a through 3.2.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51684?
CVE-2023-51684 is classified as a medium severity vulnerability due to the potential for stored cross-site scripting (XSS).
How do I fix CVE-2023-51684?
To fix CVE-2023-51684, update the Easy Digital Downloads plugin to the latest version beyond 3.2.5, which resolves the XSS vulnerabilities.
Which versions are affected by CVE-2023-51684?
CVE-2023-51684 affects Easy Digital Downloads versions up to and including 3.2.5.
What type of vulnerability is CVE-2023-51684?
CVE-2023-51684 is an improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS).
Can CVE-2023-51684 affect my WordPress site?
Yes, CVE-2023-51684 can affect WordPress sites using the vulnerable versions of the Easy Digital Downloads plugin.