Description
Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Revive | Revive Adserver | 6 – ≤ 6.0.1, 5 – ≤ 5.5.2 | 6.0.2 |