Advisories · Technology
spacetime Ad Inserter – Ad Manager & AdSense Ads.
Every CVE that names spacetime Ad Inserter – Ad Manager & AdSense Ads among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Code injection
- CVSS 4.3 Medium
Ad Inserter <= 2.8.18 - Authenticated (Subscriber+) Sensitive Information Disclosure in 'ai-debug-processing-fe' & 'ai-debug-meta' URL Parameters
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Information disclosure
- CVSS 6.1 Medium
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via 's' Search Parameter
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Ad Inserter <= 2.8.16 - Missing Authorization to Unauthenticated Header/Footer Code Disclosure via 'ai-debug-code' Parameter
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Broken access control
- CVSS 5.3 Medium
Ad Inserter <= 2.8.16 - Missing Authorization to Block Visibility Bypass via ai_ajax
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Broken access control
- CVSS 4.3 Medium
Ad Inserter <= 2.8.16 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Content Disclosure via 'data' Shortcode Attribute
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Broken access control
- CVSS 6.1 Medium
Ad Inserter <= 2.8.15 - Reflected Cross-Site Scripting via URL Parameters in iframe Mode
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Ad Inserter <= 2.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai-debug-processing-fe
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Broken access control
- CVSS 5.3 Medium
Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Broken access control