Description
Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Revive | Revive Adserver | 6 – ≤ 6.0.1 | 6.0.2 |
Medium · 6.1
CVE-2025-55124
EUVD-2025-198347GHSA-gf24-vpmr-2cq3
Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.
Published Nov 20, 2025 · Updated Nov 20, 2025 · Assigned by hackerone