Advanced ads Management by Inazo, 83748619e34aa47e21c32a4e080e7829c69fcbb0

CVE, Research URL: 83748619e34aa47e21c32a4e080e7829c69fcbb0
Home page URL: Security reports for Advanced ads Management by Inazo
Application: Advanced ads Management by Inazo
Published on: Sep 06, 2016
Research Description: Advanced ads Management by Inazo [inazo-advanced-ads-management] < 1.4 Inazo Advanced Ads Management < 1.4 - Authenticated Stored Cross-Site Scripting The Inazo Advanced Ads Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘adds’ parameter in versions before 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with low-level privileges or above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.4.
Status: vulnerable