cleantalk
Vulnerabilities and Security Researches

Affiliate Ads for ClickBank, CVE-2015-20106

CVE, Research URL

CVE-2015-20106

Published on
Dec 02, 2021
Research Description
The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Affected versions
Min -, max 1.35.
Status
vulnerable