Description
Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Spacetime | Ad Inserter | ≤ 2.8.18 | — |
High · 7.1
CVE-2026-97077
EUVD-2026-89895GHSA-29rj-8rh3-98gw
WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack