CVE-2015-9377

iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9377

Vulnerability: iThemes Builder Theme Depot for WordPress is affected by an XSS flaw in add_query_arg() and remove_query_arg(). Version range affected is prior to 5.0.30. Root cause details are not elaborated beyond the XSS via query argument handling. Impact is described as cross-site scripting, ...