Lucene search
China National Vulnerability DatabaseCNVD-2021-83668HistoryOct 25, 2021 - 12:00 a.m.
WordPress Cross-Site Scripting Vulnerability (CNVD-2021-83668)
2021-10-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.001 Low
EPSS
Percentile
26.4%
WordPress is a set of blogging platforms developed by the WordPress (Wordpress) Foundation using the PHP language. A cross-site scripting vulnerability exists in the WordPress plugin Easy Digital Downloads, which can be exploited to inject arbitrary web scripts via the $start_date and $end_date parameters in the ~/includes/admin/payments/class-payments-table.php file. file with the $start_date and $end_date parameters to inject arbitrary web scripts.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress wordpress easy digital downloads | le | 2.11.2 |
Related
patchstack
patchstack
prion
prion
Cross site scripting
2021-10-21 20:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Easy Digital Downloads < 2.11.2.1 - Reflected Cross-Site Scripting
2021-10-19 00:00:00
nvd
nvd
CVE-2021-39354
2021-10-21 20:15:08
cve
cve
CVE-2021-39354
2021-10-21 20:15:08
wpexploit
wpexploit
Easy Digital Downloads < 2.11.2.1 - Reflected Cross-Site Scripting
2021-10-19 00:00:00