Spacetime vulnerabilities
We track 2 vulnerabilities in Spacetime products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 17, 2024.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Spacetime vulnerabilities
- 7.1 High severity
Ad Inserter: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spacetime Ad Inserter ad-inserter allows Reflected XSS.This issue affects Ad Inserter: from n/a through <= 2.7.37.
- 7.5 High severity
Ad Inserter – Ad Manager & AdSense Ads: Missing Authorization
The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-processing-fe URL parameter. This can allow unauthenticated attackers to extract sensitive data including installed plugins