high8.8
CVE-2015-9497
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
Impact
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ad Inserter Project | Ad Inserter | before 1.5.3 |