Information disclosure

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9379

The CVE-2015-9379 entry concerns WordPress plugin WordPress iThemes Builder Style Manager. Affected component: the Style Manager widget/plugin (iThemes Builder Style Manager) for WordPress, with vulnerable versions before 0.7.7. Root cause: cross-site scripting (XSS) vulnerability via the add_que...

CVE-2015-9379: Improper Neutralization of Input During Web Page Generation

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

PT-2019-7338

Name of the Vulnerable Software and Affected Versions iThemes Builder Style Manager versions prior to 0.7.7 Description The issue concerns a problem with the add query arg and remove query arg functions, which can lead to XSS. Recommendations For versions prior to 0.7.7, update to version 0.7.7 o...