CVE-2025-55123

5.4 mediumEPSS 0.5%

Medium (5.4) in revive-adserver revive adserver. EPSS 0.5% chance of exploitation in the next 30 days.

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-11-20
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

revive-adserver:revive_adserver

References

https://hackerone.com/reports/3404968
https://hackerone.com/reports/3404968

Check your stack JSON