Lucene search
Daniel RufWPVDB-ID:2AC5B87B-1390-41CE-AF6E-C50E5709BAAAHistoryMay 12, 2022 - 12:00 a.m.
WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
2022-05-1200:00:00
Daniel Ruf
wpscan.com
7
0.001 Low
EPSS
Percentile
26.0%
The plugin does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress-plugin-for-simple-google-adsense-insertion | lt | 2.1 |
Related
patchstack
patchstack
cve
cve
CVE-2022-1695
2022-06-08 10:15:10
cnvd
cnvd
WordPress WP Simple Adsense Insertion plugin跨站请求伪造漏洞
2022-06-13 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-06-08 10:15:00
nvd
nvd
CVE-2022-1695
2022-06-08 10:15:10
wpexploit
wpexploit
WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF
2022-05-12 00:00:00
cvelist
cvelist