CVE-2015-9378

The CVE-2015-9378 entry concerns iThemes Builder Theme Market for WordPress, where a cross-site scripting (XSS) vulnerability exists in the add_query_arg() and remove_query_arg() paths. Affected product/version: iThemes Builder Theme Market prior to 5.1.27. Root cause: insufficient input handling...