Advanced ads Management by Inazo, 63dad79a-aa7a-4607-afe4-e1c218b31da6

CVE, Research URL: 63dad79a-aa7a-4607-afe4-e1c218b31da6
Home page URL: Security reports for Advanced ads Management by Inazo
Application: Advanced ads Management by Inazo
Published on: -
Research Description: Advanced ads Management by Inazo [inazo-advanced-ads-management] < 1.4 Advanced ads Management <= 1.3 - Authenticated Stored Cross-Site Scripting (XSS) Any authenticated user, including authors, can embed JavaScript via the 'HTML Codes' functionality when creating a new add. Embedding JavaScript should be restricted to users with the 'unfiltered_html' capability.
Affected versions: max 1.4.
Status: vulnerable