PT-2026-55006 · Greg Winiarski+1 · Wpadverts
CVSS v3.1
7.1
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
WPAdverts versions prior to 2.3.2
Description
The WPAdverts – Classifieds Plugin for WordPress contains a stored Cross-Site Scripting (XSS) flaw. This occurs because the plugin fails to properly sanitize input and escape output, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts execute automatically when a user visits the affected page.
Recommendations
Update the plugin to a version newer than 2.3.1.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpadverts