CVE-2015-9518

The Easy Digital Downloads (EDD) PDF Invoices extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-10-23

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Easy Digital Downloads (Awesomemotive)
• Pdf Invoices (Easydigitaldownloads)

References

• https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/