CVE-2015-9367

The CVE-2015-9367 entry concerns the WordPress ecosystem: the Easy Canadian Sales Taxes Add-on for iThemes Exchange is vulnerable to cross‑site scripting (XSS) through add_query_arg()/remove_query_arg() in versions before 1.1.0. The underlying issue is improper handling of query parameters that c...