CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Improper Validation of Specified Quantity in Input vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded allows Manipulating Hidden Fields.This issue affects Ads by WPQuads: from n/a through <= 3.0.2.
Explanation of Vulnerability in Simple Terms
Ads by WPQuads versions 3.0.2 and earlier contain a vulnerability allowing network-based attackers to modify site data and disrupt service without authentication. The flaw stems from insufficient input validation in the plugin's core functionality. Site administrators should update to a version newer than 3.0.2 immediately.
What an attacker can do
Modify site content and cause service disruption without needing to log in.
Potential impact on your site
Attackers can alter your site's data and cause downtime without credentials.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
