CVE-2015-9511: XSS
Published Oct 23, 2019
·Updated
The Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused.
Affected Software
14 affected components
All of the following
Any of the following
Awesomemotive Easy Digital Downloads Wordpress>=1.8<1.8.7
Awesomemotive Easy Digital Downloads Wordpress>=1.9<1.9.10
Awesomemotive Easy Digital Downloads Wordpress>=2.0<2.0.5
Awesomemotive Easy Digital Downloads Wordpress>=2.1<2.1.11
Awesomemotive Easy Digital Downloads Wordpress>=2.2<2.2.9
Awesomemotive Easy Digital Downloads Wordpress>=2.3<2.3.7
Easydigitaldownloads Conditional Success Redirects Easy Digital Downloads
Sandhillsdev Easy Digital Downloads Wordpress>=1.8<1.8.7
Sandhillsdev Easy Digital Downloads Wordpress>=1.9<1.9.10
Sandhillsdev Easy Digital Downloads Wordpress>=2.0<2.0.5
Sandhillsdev Easy Digital Downloads Wordpress>=2.1<2.1.11
Sandhillsdev Easy Digital Downloads Wordpress>=2.2<2.2.9
Sandhillsdev Easy Digital Downloads Wordpress>=2.3<2.3.7
Easydigitaldownloads Conditional Success Redirects Easy Digital Downloads
Event History
Oct 23, 2019
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
Description
Frequently Asked Questions
1
What is CVE-2015-9511?
CVE-2015-9511 is a vulnerability in Easy Digital Downloads (EDD) Conditional Success Redirects extension for WordPress that allows for XSS attacks due to misuse of add_query_arg.
2
How severe is CVE-2015-9511?
CVE-2015-9511 has a severity level of 6.1 (medium).
3
Which versions of Easy Digital Downloads are affected by CVE-2015-9511?
Versions 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 are affected by CVE-2015-9511.