Beveiligingsadvies

CVE-2021-22871

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-21 19:15:11
Laatst bijgewerkt 2024-08-03 18:51:07
Toegewezen door hackerone
CVSS-score geen score
Status PUBLISHED

Beschrijving

Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability.