Description
Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Revive | Revive Adserver | 6 – ≤ 6.0.1, 5 – ≤ 5.5.2 | 6.0.2 |
Medium · 6.3
CVE-2025-48987
EUVD-2025-198345GHSA-q94p-3cgr-229v
Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.
Published Nov 20, 2025 · Updated Nov 20, 2025 · Assigned by hackerone