CVE-2015-9497

The Ad Inserter plugin for WordPress versions prior to 1.5.3 contains a cross-site request forgery vulnerability in its settings page that can be exploited to execute cross-site scripting attacks. An attacker could trick an authenticated administrator into visiting a malicious page that performs unauthorized actions on the plugin's configuration page, potentially allowing injection of malicious scripts that execute in the admin interface.

Based on public CVE data (MITRE/NVD).