WordPress Ezoic plugin <= 2.8.8 - Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability

Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability discovered by José Aguilera Patchstack Alliance in the WordPress Ezoic plugin versions = 2.8.8. Solution Update the WordPress Ezoic plugin to the latest available version at least 2.8.9...

PT-2022-25665 · Ezoic · Ezoic Plugin

Name of the Vulnerable Software and Affected Versions: Ezoic plugin versions prior to 2.8.9 Description: The issue allows for unauthenticated changes to plugin settings, leading to stored XSS. Recommendations: For Ezoic plugin versions prior to 2.8.9, update to version 2.8.9 or later to resolve t...

ezoic.com XSS vulnerability

Vulnerable URL: http://www.ezoic.com/publisher.php?msg=please%20log%20in%20to%20your%20ezoic%20account%20to%20block%20ad%20positions%20on%20your%20site."--!"= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...