CVE-2026-50745

6.1 Moyenne

Publiée le 26/06/2026 à 04:16 · Modifiée le 29/06/2026 à 22:17 · Analysée par le NVD · Source : support@hackerone.com

Description

A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input to be reflected without escaping.

Traduire en français

Produits concernés

Revive Adserver
Revive-adserver revive adserver

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N`
3.0	4.7 Moyenne	support@hackerone.com	`CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://hackerone.com/reports/3793243 Issue Tracking

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories