Description

Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors.

Remediation

References

CVE-2015-7365

Related Vulnerabilities

Liferay DXP Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43814)

EspoCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5966)

Atlassian Jira Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2313)

WordPress Plugin Simple Mail Address Encoder Cross-Site Scripting (1.6.1)

Oracle JRE CVE-2013-0445 Vulnerability (CVE-2013-0445)

Severity

Medium

Classification

CVE-2015-7365 CWE-707

Tags

Missing Update Known Vulnerabilities