2 matches found
CVE-2015-9497: Cross-Site Request Forgery (CSRF)
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...
8.8CVSS7.8AI score0.0098EPSS
SaveExploits1References2
PT-2019-7456
Name of the Vulnerable Software and Affected Versions ad-inserter plugin versions prior to 1.5.3 Description The issue concerns a CSRF vulnerability with resultant XSS in the ad-inserter plugin for WordPress. This can be exploited via the "wp-admin/options-general.php?page=ad-inserter.php"...
8.8CVSS0.0098EPSS
SaveExploits1References5
20