CVE-2015-9507

CVE-2015-9507 concerns the Easy Digital Downloads (EDD) Attach Accounts to Orders extension for WordPress. The vulnerability is an XSS flaw caused by the misused add_query_arg function in affected builds across multiple EDD versions (1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2....