Threats tagged 'ghsa-c4gw-fqw8-f4wj'

A cross-site scripting (XSS) vulnerability exists in Revive Adserver versions 5.5.2, 6.0.1, and earlier. This flaw allows manager accounts to craft XSS attacks targeting their own advertiser users. The vulnerability arises from improper neutralization of input, which can lead to limited confidentiality impact but no integrity or availability impact.