CVE-2015-9532

The Easy Digital Downloads (EDD) Digital Store theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because add_query_arg is misused.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-10-23

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Easy Digital Downloads (Awesomemotive)
• Digital Store (Easydigitaldownloads)

References

• https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/