← Back to CVE List

CVE-2015-9520

Published: 2019-10-23T17:15Z
Last Modified: 2025-02-07T19:44Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt