Approved changes feed: RSS · Atom

cpe:2.3:a:easy_media_download_project:easy_media_download:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorEasy Media Download Project (4d912828-2755-5efd-b2c1-3dbd3341a1ac)
ProductEasy Media Download (bc34d12e-7dfd-5b12-ba16-0a9fc6cba5e6)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24699 vulnerable 2026-06-08 05:30:39.028735 Easy Media Download < 1.1.7 - Contributor+ Stored Cross-Site Scripting
The Easy Media Download WordPress plugin before 1.1.7 does not escape the text argument of its shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
Published: 2021-10-25T13:20:50.000Z
Updated: 2024-08-03T19:42:16.085Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.