CVE-2015-7365

Cross-site scripting XSS vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors...

CVE-2015-7365

Revive Adserver is affected by CVE-2015-7365: a reflected XSS in the plugin upgrade form where filenames of uploaded files containing errors are not properly escaped. The vulnerability affects Revive Adserver versions

CVE-2015-7365: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors...

PT-2015-7528

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.2 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by uploading a file containing errors via the plugin upgrade form,...

WordPress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

Video Gallery plugin is prone to multiple vulnerabilities, such as SQL injection and XSS vulnerabilities. Solution Upgrade the plugin...

WordPress RokStories Plugin - Multiple Security Vulnerabilities

WordPress RokStories plugin's "thumb.php" is prone to multiple security vulnerabilities, such as an arbitrary file-upload, cross-site scripting, information disclosure and denial-of-service vulnerabilities. Because of these issues, attackers can execute arbitrary script code in the browser of an...

WordPress GRAND Flash Album Gallery Plugin 1.71 - Cross Site Scripting

WordPress GRAND Flash Album Gallery plugin's "admin.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...