← Back to CVE List

CVE-2015-9526

Published: 2019-10-23T16:15Z
Last Modified: 2025-02-07T19:44Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Easy Digital Downloads (EDD) Reviews extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt