ResAds <= 1.0.1 is vulnerable to Cross Site Scripting

Unauthenticated

Published
2015-10-04

Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.

CVE

https://www.cve.org/CVERecord?id=CVE-2015-7667

CVSS

Score:6.1

Severity:Medium

Version: 1.0.1

There is a patch available in v1.0.2 and we strongly recommend you update to this version as soon as possible.