CVE · Medium

CVE-2022-0662 — AdRotate Banner Manager [adrotate] < 5.8.23

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-0662 AdRotate Banner Manager [adrotate] < 5.8.23 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 4.8 < 5.8.23 5.8.23 2022-04-11

CVE-2022-0662

The AdRotate Banner Manager plugin versions prior to 5.8.23 fail to properly sanitize and escape advertisement names, enabling administrators and other high-privilege users to inject malicious scripts into the system regardless of whether unfiltered HTML permissions have been restricted.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.