CVE-2015-9364

2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9364

CVE-2015-9364 affects the WordPress plugin component “2Checkout Add-on for iThemes Exchange.” It describes a Cross-Site Scripting (XSS) vulnerability via add_query_arg() and remove_query_arg() in versions before 1.1.0. The underlying issue is unsafe handling of query arguments in the plugin, enab...