CVE-2015-9360

The CVE covers the UpdraftPlus WordPress backup plugin. Affected: UpdraftPlus plugin before version 1.9.64. Vulnerability: XSS via add_query_arg() and remove_query_arg(). Root cause: improper handling of query arguments enabling client-side script injection. Impact: cross-site scripting accessibl...