← Back to CVE List

CVE-2015-9518

Published: 2019-10-23T17:15Z
Last Modified: 2025-02-07T19:44Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt