Threats tagged 'ghsa-29cq-chg3-j5hf'

A reflected cross-site scripting (XSS) vulnerability exists in the popup invocation options of Revive Adserver version 6.0.8 and earlier. This flaw allows an unauthenticated attacker to execute arbitrary JavaScript in the browser of an authenticated user by tricking them into visiting a specially crafted URL. The vulnerability arises because certain request parameters (top, left, timeout, delay) are inserted into HTML attributes without proper encoding. Exploitation requires the presence of an existing popup zone, which can only be created through the administrator API and is not available via the standard zone-creation interface. The issue is resolved in version 6.0.9 by applying HTML encoding to the affected parameters.