CVE-2026-50742

5.4 Moyenne

Publiée le 26/06/2026 à 04:16 · Modifiée le 29/06/2026 à 22:20 · Analysée par le NVD · Source : support@hackerone.com

Description

A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.

Traduire en français

Produits concernés

Revive Adserver
Revive-adserver revive adserver

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N`
3.0	4.4 Moyenne	support@hackerone.com	`CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://hackerone.com/reports/3781311 Issue TrackingThird Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories