CVE-2015-9515: XSS
Published Oct 23, 2019
·Updated
The Easy Digital Downloads (EDD) htaccess Editor extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused.
Affected Software
14 affected components
All of the following
Any of the following
Awesomemotive Easy Digital Downloads Wordpress>=1.8<1.8.7
Awesomemotive Easy Digital Downloads Wordpress>=1.9<1.9.10
Awesomemotive Easy Digital Downloads Wordpress>=2.0<2.0.5
Awesomemotive Easy Digital Downloads Wordpress>=2.1<2.1.11
Awesomemotive Easy Digital Downloads Wordpress>=2.2<2.2.9
Awesomemotive Easy Digital Downloads Wordpress>=2.3<2.3.7
Easydigitaldownloads Htaccess Editor Easy Digital Downloads
Sandhillsdev Easy Digital Downloads Wordpress>=1.8<1.8.7
Sandhillsdev Easy Digital Downloads Wordpress>=1.9<1.9.10
Sandhillsdev Easy Digital Downloads Wordpress>=2.0<2.0.5
Sandhillsdev Easy Digital Downloads Wordpress>=2.1<2.1.11
Sandhillsdev Easy Digital Downloads Wordpress>=2.2<2.2.9
Sandhillsdev Easy Digital Downloads Wordpress>=2.3<2.3.7
Easydigitaldownloads Htaccess Editor Easy Digital Downloads
Event History
Oct 23, 2019
CVE Published
via MITRE·04:10 PM
Data Sourced
via MITRE·04:10 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-9515?
CVE-2015-9515 has a medium severity rating due to its potential for XSS attacks.
2
How do I fix CVE-2015-9515?
To fix CVE-2015-9515, update Easy Digital Downloads to version 1.8.7, 1.9.10, 2.0.5, 2.1.11, 2.2.9, or 2.3.7 or later.
3
Which versions of Easy Digital Downloads are affected by CVE-2015-9515?
CVE-2015-9515 affects Easy Digital Downloads versions prior to 1.8.7, 1.9.10, 2.0.5, 2.1.11, 2.2.9, and 2.3.7.
4
What type of vulnerability is CVE-2015-9515?
CVE-2015-9515 is an XSS (Cross-Site Scripting) vulnerability.
5
Who is responsible for the Easy Digital Downloads htaccess Editor extension that has CVE-2015-9515?
CVE-2015-9515 affects the Easy Digital Downloads htaccess Editor extension developed by Sandhills Development.