Vulnerabilities > Revive Adserver > Revive Adserver > 3.2.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-10-14 | CVE-2015-7365 | Cross-site Scripting vulnerability in Revive-Adserver Revive Adserver Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors. | 4.3 |
| 2015-10-14 | CVE-2015-7364 | Cross-Site Request Forgery (CSRF) vulnerability in Revive-Adserver Revive Adserver The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an empty token. | 6.8 |