VULNERABILITY INTELLIGENCE

CVE-2025-55123

CVSS score5.4 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2025-11-20

Last modified2026-09-26

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79

Primary references

support@hackerone.com — Exploit, Issue Tracking, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Third Party Advisory