EUVD-2015-9205

Malware in sbrugna...

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

WordPress iThemes Exchange Authorize.net Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce sites using the WordPress content management system. authorize.net Add-on is one of the Authorize Payment Gateway plugins. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Authorize.net Add-on. An attacker...

CVE-2015-9365

The CVE-2015-9365 entry concerns the WordPress plugin component: Authorize.net Add-on for iThemes Exchange, affected on versions before 1.1.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via add_query_arg() and remove_query_arg(), as described in multiple sources (NVD entr...

CVE-2015-9365: Improper Neutralization of Input During Web Page Generation

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7324

Name of the Vulnerable Software and Affected Versions iThemes Exchange Authorize.net Add-on for WordPress version prior to 1.1.0 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 1.1.0, upda...