CVE-2015-9520 | Easy Digital Downloads Per Product Emails Extension up to 2.3.6 on WordPress add_query_arg cross site scripting

A vulnerability classified as problematic was found in Easy Digital Downloads Per Product Emails Extension up to 2.3.6 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument add_query_arg leads to cross site scripting. This vulnerability is known as CVE-2015-9520. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.