CVE-2015-20105

The CVE-2015-20105 entry concerns the WordPress ClickBank Affiliate Ads plugin (versions up to 1.20). The vulnerability arises from a missing CSRF check when saving settings, enabling an authenticated attacker to modify settings via CSRF. Additionally, output escaping is insufficient, leading to ...