Back to search
CVE-2016-9130
Published: Mar 28, 2017
Modified: Aug 6, 2024
PUBLISHED
Description
Revive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via the Revive Adserver user interface exists, requiring a trusted (non-admin) account. The website name wasn't properly escaped when displayed in the campaign-zone.php script.
| Vendor | Product | Versions |
|---|---|---|
n/a | Revive Adserver All versions before 3.2.3 | affected Revive Adserver All versions before 3.2.3 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now