WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter
The WPAdverts plugin for WordPress is vulnerable to unauthenticated stored cross-site scripting via the adverts_location parameter. Attackers can inject scripts that execute when users access affected pages.