CVE-2015-7667: Web-Mv Resads

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter.

Affected products

• Web-Mv Resads: before 1.0.2 (fixed in 1.0.2)

Published 2017-12-27. Last modified 2026-06-17.