Unrated
Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then di...
CVE-2021-22871
First seen on SecPulse
Original description The description as published by the source.
Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability.
References
- advisory packetstormsecurity.com
- advisory seclists.org
- advisory revive-adserver.com
- patch github.com
- patch github.com
- report hackerone.com