Read the docs

Cbads

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cbads records in CISA KEV

No Cbads vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Clickbank Affiliate Ads 2 records MEDIUM

Records

2 records

TI-2015-08080 CVE-2015-20105 · GHSA-mxrp-jrwv-r3r4

ClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting

Priority MEDIUM 43

The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00985 Published 2021-12-02 No fix listed CWE-352
TI-2015-08081 CVE-2015-20106 · GHSA-922p-4vr4-cgvc

ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00699 Published 2021-12-02 No fix listed CWE-79
Open these records in search →