Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Cbads Clear all filters
TI-2015-08081 CVE-2015-20106 · GHSA-922p-4vr4-cgvc

ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00699 Published 2021-12-02 No fix listed CWE-79
TI-2015-08080 CVE-2015-20105 · GHSA-mxrp-jrwv-r3r4

ClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting

Priority MEDIUM 43

The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00985 Published 2021-12-02 No fix listed CWE-352