iPublish Media Solutions AdPortal Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in iPublish Media Solutions AdPortal version 3.0.39. This vulnerability allows remote attackers to inject malicious scripts that could be executed in the context of the user's browser. The issue arises from the shippingAsBilling parameter in the updateuserinfo.html file, which can be exploited to escalate privileges.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser. This could lead to session hijacking, defacement of the website, or redirecting the user to malicious sites.