Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
References
Link | Resource |
---|---|
https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html | Third Party Advisory |
https://ithemes.com/coordinated-wordpress-plugin-security-update/ | Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2019-08-28 12:15
Updated : 2024-02-28 17:08
NVD link : CVE-2015-9368
Mitre link : CVE-2015-9368
CVE.ORG link : CVE-2015-9368
JSON object : View
Products Affected
ithemes
- easy_eu_value_added_\(vat\)_taxes
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')