Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user...
3.5CVSS0.00361EPSS
SaveExploits1References1
EUVD•added 2025/10/10 6:31 p.m.•12 views
EUVD-2025-33760
An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file...