Description (CNA)
Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Revive / Revive Adserver | affected 6 through 6.0.1; affected 5 through 5.5.2; unaffected 6.0.2 through 6.0.2; unaffected 5.5.3 through 5.5.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.