← CVE Intelligence

CVE-2022-1695

WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRF PUBLISHED

Description (CNA)

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

Affected (CNA)

Vendor / productVersions
Unknown / WP Simple Adsense Insertionaffected 2.1 before 2.1

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.