MEDIUM
Ad Inserter < 2.7.10 - Reflected Cross-Site Scripting
Published Feb 21, 2022
6.1
MEDIUMCVSS 3.1
EPSS 2.06%
Description
The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Affected products
- Vendor n/a Product Ad Inserter Pro Defaultn/a
- Version 2.7.10StatusaffectedConstraints<2.7.10
- Version
- Vendor n/a Product Ad Inserter – Ad Manager & AdSense Ads Defaultn/a
- Version 2.7.10StatusaffectedConstraints<2.7.10
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Ad Inserter Pro | n/a |
| ||||||
| n/a | Ad Inserter – Ad Manager & AdSense Ads | n/a |
|
OR
- < 2.7.10
- < 2.7.10
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (1)
- https://wpscan.com/vulnerability/27b64412-33a4-462c-bc45-f81697e4fe42 x_refsource_MISCExploitThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://wpscan.com/vulnerability/27b64412-33a4-462c-bc45-f81697e4fe42 | x_refsource_MISCExploitThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner WPScan
Published Feb 21, 2022
Updated Aug 2, 2024
Reserved Jan 19, 2022
Link CVE-2022-0288
CISA Vulnrichment
Updated n/a