CVE-2015-9359

The CVE-2015-9359 entry concerns the WordPress Jetpack plugin (pre-3.4.3) with a cross-site scripting (XSS) vulnerability exploitable via add_query_arg() and remove_query_arg(). Affected product: Jetpack plugin for WordPress; vulnerable component/behavior: input/output handling around query arg f...