Filtered by vendor Cbads
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2015-20106 | 1 Cbads | 1 Clickbank Affiliate Ads | 2024-08-06 | 4.8 Medium |
| The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. | ||||
| CVE-2015-20105 | 1 Cbads | 1 Clickbank Affiliate Ads | 2024-08-06 | 9.6 Critical |
| The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scripting issues | ||||
Page 1 of 1.