CVE-2015-9510: XSS
Published Oct 23, 2019
·Updated
The Easy Digital Downloads (EDD) Cross-sell Upsell extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused.
Affected Software
14 affected components
All of the following
Any of the following
Awesomemotive Easy Digital Downloads Wordpress>=1.8<1.8.7
Awesomemotive Easy Digital Downloads Wordpress>=1.9<1.9.10
Awesomemotive Easy Digital Downloads Wordpress>=2.0<2.0.5
Awesomemotive Easy Digital Downloads Wordpress>=2.1<2.1.11
Awesomemotive Easy Digital Downloads Wordpress>=2.2<2.2.9
Awesomemotive Easy Digital Downloads Wordpress>=2.3<2.3.7
Easydigitaldownloads Cross-sell And Upsell Easy Digital Downloads
Sandhillsdev Easy Digital Downloads Wordpress>=1.8<1.8.7
Sandhillsdev Easy Digital Downloads Wordpress>=1.9<1.9.10
Sandhillsdev Easy Digital Downloads Wordpress>=2.0<2.0.5
Sandhillsdev Easy Digital Downloads Wordpress>=2.1<2.1.11
Sandhillsdev Easy Digital Downloads Wordpress>=2.2<2.2.9
Sandhillsdev Easy Digital Downloads Wordpress>=2.3<2.3.7
Easydigitaldownloads Cross-sell And Upsell Easy Digital Downloads
Event History
Oct 23, 2019
CVE Published
via MITRE·04:12 PM
Data Sourced
via MITRE·04:12 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-9510?
CVE-2015-9510 has a medium severity level due to its ability to allow XSS attacks.
2
How do I fix CVE-2015-9510?
To fix CVE-2015-9510, update Easy Digital Downloads to version 1.8.7, 1.9.10, 2.0.5, 2.1.11, 2.2.9, or 2.3.7 or later.
3
What type of vulnerability is CVE-2015-9510?
CVE-2015-9510 is an XSS (Cross-Site Scripting) vulnerability.
4
Which versions of Easy Digital Downloads are affected by CVE-2015-9510?
CVE-2015-9510 affects Easy Digital Downloads versions prior to 1.8.7, 1.9.10, 2.0.5, 2.1.11, 2.2.9, and 2.3.7.
5
Who is the vendor associated with CVE-2015-9510?
The vendor associated with CVE-2015-9510 is Sandhills Development, the creator of Easy Digital Downloads.