cleantalk
Vulnerabilities and Security Researches

Ad Inserter – Ad Manager & AdSense Ads, CVE-2015-9497

CVE, Research URL

CVE-2015-9497

Published on
Oct 23, 2019
Research Description
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
Affected versions
max 1.5.3.
Status
vulnerable