CVE-2015-9376: XSS
First published: Wed Aug 28 2019(Updated: )
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ithemes Mobile | <1.2.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2015-9376?
CVE-2015-9376 is a cross-site scripting (XSS) vulnerability in the iThemes Mobile plugin for WordPress.
What is the severity of CVE-2015-9376?
CVE-2015-9376 has a severity score of 6.1, which is considered medium.
How does CVE-2015-9376 affect iThemes Mobile?
CVE-2015-9376 affects iThemes Mobile versions up to and including 1.2.8 for WordPress.
How can the XSS vulnerability in iThemes Mobile be exploited?
The XSS vulnerability in iThemes Mobile can be exploited through the use of the add_query_arg() and remove_query_arg() functions.
Is there a fix for CVE-2015-9376?
Yes, the vulnerability can be fixed by updating iThemes Mobile to version 1.2.8 or above.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/author
- agent/severity
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ithemes
- canonical/ithemes mobile