Cross Site Scripting and Open Redirect in affiliate-preview.php file

开放重定向 / 开放重定向 / #819362

厂商

Revive Adserver

严重程度

低危

赏金

—

弱点

开放重定向

研究员

@keyurvala

披露日期

2021-01-20

资产

https://github.com/revive-adserver/revive-adserver

CVE

CVE-2021-22871

该报告还没有中文解读。

Summary: Stored XSS can be submitted on the Website using Default Manager, and anyone who will check the report the XSS and Open Redirect will trigger.