| Package | Affected versions | Patched versions |
|---|---|---|
| revive adserver | ≤ 3.2.2 |
Revive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, period_start, period_end, and possibly others.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free