description: Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability.
problem types: Cross-site Scripting (XSS) - Stored (CWE-79)
affected:
{
product: https://github.com/revive-adserver/revive-adserver
vendor: n/a
versions:
status: affected, version: Fixed in 5.1.0
}