Description
Cross-site scripting (XSS) vulnerability in the "magic-macros" feature in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via a GET parameter, which is not properly handled in a banner.
Remediation
References
Related Vulnerabilities
WordPress Other Vulnerability (CVE-2007-0109)
WordPress Plugin WP Content Filter Unspecified Vulnerability (2.42)
Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7852)
Moodle Server-Side Request Forgery (SSRF) Vulnerability (CVE-2022-45152)
WordPress 7PK - Security Features Vulnerability (CVE-2016-10148)