CVE-2022-0662

CVE-2022-0662: Adrotate < 5.8.23 - Admin+ XSS via Advert Name

Vendor Unknown

Product AdRotate – Ad manager & AdSense Ads

Weakness CWE-79 · XSS

Published May 2, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Key dates

02Disclosure timeline

May 2, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0662 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-4100 Multiple vulnerabilities in IDM Sistemas QSige CVE-2025-53526 WeGIA allows Stored XSS attacks in novo_memorando.php CVE-2023-2341 Cross-site Scripting (XSS) - Generic in pimcore/pimcore CVE-2023-28429 Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field CVE-2023-48317 WordPress Display Custom Post Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)