Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
| Software | From | Fixed in |
|---|---|---|
| openads / openads | 2.0.9_pr1 | 2.0.9_pr1.x |
| openads / openads | 2.0.8_pr1 | 2.0.8_pr1.x |