Security Advisory
CVE-2015-9497
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.