Vulners
Lucene search
2 matches found
CVE-2022-0901
The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUESTURI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...
6.1CVSS6.4AI score0.03557EPSS
Exploits4References2
Cross site scripting
The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUESTURI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters...
4.3CVSS6AI score0.03557EPSS
Exploits4References2Affected Software1
20