CVE-2015-9359

CVE-2015-9359

EPSS 0.9%

The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html https://jetpack.com/2015/04/20/jetpack-3-4-3-coordinated-security-update/