cbcvebase.

Ad Injection Project Ad Injection vulnerabilities

1 known vulnerability affecting ad_injection_project/ad_injection.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-0661P3HIGHCVSS 7.2≤ 1.2.0.192022-04-18
CVE-2022-0661 [HIGH] CWE-94 CVE-2022-0661: The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the advert The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a stored cross-site scripting (XSS) vulnerability. Further it is also possible to inject PHP code, l
nvd
Ad Injection Project Ad Injection vulnerabilities | cvebase