Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-55123 EUVD-2025-198349GHSA-c4gw-fqw8-f4wj

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS at…

Published Nov 20, 2025 · Updated Nov 20, 2025 · Assigned by hackerone

Vendor: Revive Product: Revive Adserver

Description

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

Affected products

VendorProductAffectedFixed
Revive Revive Adserver 6 – ≤ 6.0.1, 5 – ≤ 5.5.2 6.0.2

References