Ad Injection
1 CVEs
product
Monthly
The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RCE
XSS
Code Injection
WordPress
PHP
+1
NVD
WPScan
CVSS 3.1
7.2
EPSS
40.2%
EPSS 40%
CVSS 7.2
HIGH
POC
THREAT
This Week
The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RCE
XSS
Code Injection
+3
NVD
WPScan