Description
Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. While this issue was previously addressed in modern browsers as CVE-2020-8115, some older browsers (e.g., IE10) that do not automatically URL encode parameters were still vulnerable.
Remediation
References
Related Vulnerabilities
WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.71)
WordPress Plugin W3 Total Cache Multiple Vulnerabilities (0.9.4)
WordPress Plugin S3 Video Cross-Site Scripting (0.982)
WordPress Plugin Booking Calendar-Appointment Booking-BookIt Unspecified Vulnerability (2.3.8)
silverstripeCMS Improper Input Validation Vulnerability (CVE-2011-4962)