Description

Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors.

Remediation

References

CVE-2015-7365

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-20409)

WordPress Plugin Indexisto WordPress Site Search Cross-Site Scripting (1.0.5)

Python Other Vulnerability (CVE-2015-5652)

WordPress Plugin Top Quark Architecture 'script.php' Arbitrary File Upload (2.1.0)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2206)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-7365