3.1.1.4.1

DATE	CVE	VULNERABILITY TITLE	RISK
2024-02-05	CVE-2024-0659	Cross-site Scripting vulnerability in Sandhillsdev Easy Digital Downloads The Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the variable pricing option title in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. network low complexity sandhillsdev CWE-79	4.8
2024-02-01	CVE-2023-51684	Cross-site Scripting vulnerability in Sandhillsdev Easy Digital Downloads Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Digital Downloads Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy) allows Stored XSS.This issue affects Easy Digital Downloads – Sell Digital Files (eCommerce Store & Payments Made Easy): from n/a through 3.2.5. network low complexity sandhillsdev CWE-79	5.4