A Cross-Site Scripting (XSS) vulnerability exists in the Igor Funa Ad Inserter plugin up to version 2.8.19. This vulnerability is due to improper neutralization of script-related HTML tags, allowing an attacker to inject code. The vulnerability has a medium severity rating with a CVSS score of 5.3.