CVE-2016-9130

CVE-2016-9130 describes a persistent cross-site scripting (XSS) vulnerability in Revive Adserver versions prior to 3.2.3. This flaw allows an authenticated, non-administrative user to inject malicious scripts into the application by manipulating the website name, which is not properly escaped when displayed in the campaign-zone.php script. The vulnerability has a CVSSv3 score of 5.4 (Medium), indicating it can be exploited over a network with low attack complexity and requires user interaction, potentially leading to limited impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.