Read the docs

Ad Injection Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ad Injection Project records in CISA KEV

No Ad Injection Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ad Injection 1 record MEDIUM

Records

1 record in Ad Injection · all components

TI-2022-00576 CVE-2022-0661 · GHSA-g5jf-j433-qxmq

Ad Injection <= 1.2.0.19 - Admin+ Stored Cross-Site Scripting & RCE

Priority MEDIUM 59

The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unf…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.40237 Published 2022-04-18 No fix listed CWE-94
Open these records in search →