CVE-2015-9296

CVE-2015-9296: The WordPress Download Monitor plugin (before 1.7.1) contains an XSS flaw related to add_query_arg. Affected plugin versions up to 1.7.0 allow client‑side script execution as described in the CVE. Remediation: upgrade to 1.7.1 or newer (as indicated by records in multiple feeds). T...