| Package | Affected versions | Patched versions |
|---|---|---|
| revive adserver | ≥ 6.0.0, ≤ 6.0.1≤ 5.5.2 |
Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free