Ad Inserter - Ad Manager and AdSense Ads Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the Ad Inserter - Ad Manager and AdSense Ads plugin, version 2.8.0. The issue arises because the application generates web content dynamically without properly validating the source of potentially untrusted data, specifically in the file myapp/includes/dst/dst.php.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can update to Ad Inserter version 2.8.1, which addresses this vulnerability.