CVE Database /
CVE-2022-0288
CVE · Medium
CVE-2022-0288 — Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.7.12
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-0288
|
Ad Inserter – Ad Manager & AdSense Ads [ad-inserter] < 2.7.12 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 2.7.12
|
2.7.12 |
2022-01-24 |
—
|
CVE-2022-0288
The Ad Inserter plugin before version 2.7.10 fails to properly sanitize and escape the html_element_selection parameter, allowing attackers to inject arbitrary JavaScript code that executes in users' browsers. This reflected cross-site scripting vulnerability could enable malicious actors to steal sensitive data, hijack user sessions, or perform unauthorized actions on behalf of affected users. The issue affects all versions prior to 2.7.10 in both the free and Pro versions of the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings