medium6.1
CVE-2015-9294
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
Impact
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tipsandtricks-Hq | All In One Wp Security \& Firewall | before 3.9.5 |