Design/Logic Flaw

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9366

CVE-2015-9366 affects the Custom URL Tracking Add-on for iThemes Exchange (WordPress) prior to version 1.1.0. The vulnerability is an XSS via add_query_arg() and remove_query_arg(). The NVD data lists CVSSv2 base score 4.3 (MEDIUM) with I:P and A:N, and CVSSv3 base score 6.1 (MEDIUM) with I:L, C:...

PT-2019-7325

Name of the Vulnerable Software and Affected Versions Custom URL Tracking Add-on for iThemes Exchange version 1.1.0 and earlier Description The issue concerns a problem with Custom URL Tracking Add-on for iThemes Exchange, where there is a potential for XSS attacks. This is due to the use of add...

CVE-2015-9366: Improper Neutralization of Input During Web Page Generation

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...