CyberSecBulletin

Ad Injection vulnerabilities

We track 1 vulnerability in Ad Injection products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 18, 2022.

1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score

Latest Ad Injection vulnerabilities

  • 7.2 High severity

    Ad Injection: Improper Control of Generation of Code

    CVE-2022-0661Ad InjectionEPSS 40.2%

    The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a st