CVE-2015-20106

The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2015-20106

CVE-2015-20106 affects the WordPress plugin "ClickBank Affiliate Ads" up to version 1.20. The vulnerability is a stored Cross-Site Scripting (XSS) in the plugin’s settings due to insufficient escaping/non-filtering, enabling high-privilege users to inject scripts even when unfiltered_html is disa...