Executive brief
Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.
Affected products
- revive-adserver revive_adserver
Junglewise Threat Intelligence
CVE-2025-55124: Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.
CVE-2025-55124 · Severity: medium · CVSS 6.1 · Published 2025-11-20
Technologies: Revive-Adserver Revive Adserver. Vendors: Revive-Adserver.