Threats tagged 'ghsa-f5fh-r4mj-fqj8'

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress versions up to and including 2.8.7 contains a stored cross-site scripting (XSS) vulnerability. This flaw arises from insufficient input sanitization and output escaping of user-supplied attributes in the 'adinserter' shortcode's custom field. Authenticated users with contributor-level access or higher can exploit this to inject arbitrary scripts that execute when other users view the affected pages.