Launchpad.net

CVE 2015-9321

The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.

See the CVE page on Mitre.org for more details.

References