← CVE Intelligence

CVE-2022-0649

Adrotate < 5.8.23 - Admin+ XSS via Group Name PUBLISHED

Description (CNA)

The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Affected (CNA)

Vendor / productVersions
Unknown / AdRotate – Ad manager & AdSense Adsaffected 5.8.23 before 5.8.23

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.