Ad Injection Project ≫ Ad Injection

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

7.2

CVE-2022-0661

Exploit

EPSS 18.31%
Published 18.04.2022 18:15:08
Last modified 21.11.2024 06:39:07

The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leadi...