← CVE Intelligence

CVE-2022-0662

Adrotate < 5.8.23 - Admin+ XSS via Advert Name PUBLISHED

Description (CNA)

The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Affected (CNA)

Vendor / productVersions
Unknown / AdRotate – Ad manager & AdSense Adsaffected 5.8.23 before 5.8.23

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.