Vulnerabilities and security researches forcm-ad-changer cm-ad-changer

Jun 07, 2024

CVE, Research URL: eb01fee8297a4a9b954f478959dbdb7e8b8899cf
Home page URL: Security reports for CM Ad Changer – Ad Manager and Ad Server
Application: CM Ad Changer – Ad Manager and Ad Server
Date: Jun 09, 2016
Research Description: CM Ad Changer – Ad Manager and Ad Server [cm-ad-changer] < 1.7.6 WordPress CM Ad Changer Plugin <= 1.7.7 - Cross Site Scripting (XSS) This plugin is prone to a stored cross site scripting vulnerability via "banner_title" parameter. Update the plugin.
Affected versions: Min -, max -.
Status: vulnerable

Feb 19, 2025

CVE, Research URL: CVE-2025-24758
Home page URL: Security reports for CM Ad Changer – Ad Manager and Ad Server
Application: CM Ad Changer – Ad Manager and Ad Server
Date: Mar 03, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations allows Reflected XSS. This issue affects CM Map Locations: from n/a through 2.0.8.
Affected versions: Min -, max -.
Status: vulnerable

Apr 24, 2025

CVE, Research URL: CVE-2025-46245
Home page URL: Security reports for CM Ad Changer – Ad Manager and Ad Server
Application: CM Ad Changer – Ad Manager and Ad Server
Date: Apr 22, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer allows Cross Site Request Forgery. This issue affects CM Ad Changer: from n/a through 2.0.5.
Affected versions: Min -, max -.
Status: vulnerable