CVE-2015-9368

Easy EU Value Added VAT Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9368

CVE-2015-9368 affects the Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange on WordPress, prior to version 1.2.0. The vulnerability is an XSS due to improper handling of add_query_arg() and remove_query_arg(), allowing injected scripts via URL parameters. Impact is XSS; exploitation det...