Threats tagged 'ghsa-fx82-3c3c-j2g6'

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy WordPress plugin versions up to and including 3.6.9 contain a stored cross-site scripting (XSS) vulnerability. This flaw arises from improper sanitization and escaping of PayPal IPN parameters, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. The vulnerability has a high severity rating with a CVSS score of 7.2.