Skip to content
Sign in
Not rated

CVE-2022-0649 The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to…

Description

The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Affected products and versions

Product Affected versions Fixed in
AdRotate – Ad manager & AdSense Ads 5.8 earliest → < 5.8.23 5.8.23

Other CVEs of AdRotate – Ad manager & AdSense Ads

The 3 CVEs of AdRotate – Ad manager & AdSense Ads →
CVE-2022-0662 The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege… Not rated CVE-2022-0267 The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL… Not rated
Track this CVE