Aller au contenu
Se connecter
Non notée

CVE-2022-0649 The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to…

Description

The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Produits et versions touchés

Produit Versions touchées Corrigé en
AdRotate – Ad manager & AdSense Ads 5.8 premières → < 5.8.23 5.8.23

Autres CVE de AdRotate – Ad manager & AdSense Ads

Les 3 CVE de AdRotate – Ad manager & AdSense Ads →
CVE-2022-0662 The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege… Non notée CVE-2022-0267 The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL… Non notée
Suivre cette CVE