The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.

Published Oct 22, 2019 · Updated Aug 6, 2024 · Assigned by mitre