Unknown Ad Inserter Pro vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Ad Inserter Pro, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2022-0288ad_inserter_pro_projectad_inserter_pro+4
EPSS score
2.06%
The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting6.1CVE-2022-0901ad_inserter_projectad_inserter+4
EPSS score
3.60%
The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters