Stored Cross-Site Scripting Vulnerability in WP AdCenter Ad Manager & Adsense Ads Plugin

CVE-2024-8317

What is CVE-2024-8317?

The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is susceptible to a Stored Cross-Site Scripting risk through the 'ad_alignment' attribute. This vulnerability arises from inadequate input sanitization and output escaping mechanisms. Authenticated attackers with Contributor-level access or higher can exploit this flaw to inject arbitrary web scripts into pages. The injected scripts will execute whenever a user visits the compromised page, potentially leading to unauthorized actions or data exposure.

References