{"id":"CVE-2015-9505","state":"PUBLISHED","title":"The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for Wor","description":"The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused.","publishedAt":"2019-10-23T16:13:41.000Z","updatedAt":"2024-08-06T08:51:05.384Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:42:20.193Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2015/9xxx/CVE-2015-9505.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2015-9505","state":"PUBLISHED","datePublished":"2019-10-23T16:13:41.000Z","dateUpdated":"2024-08-06T08:51:05.384Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2019-10-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2019-10-23T16:13:41.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2015-9505","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Easy Digital Downloads (EDD) core component 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7 for WordPress has XSS because add_query_arg is misused."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/","refsource":"MISC","url":"https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://web.archive.org/web/20160921003517/https://easydigitaldownloads.com/blog/security-fix-released/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T08:51:05.384Z"}}]}}}