Description

A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.

Severity (CVSS)

Base score4.4
SeverityMedium
VersionCVSS 3.0
VectorCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Provided byCNA

Weaknesses

  • CWE-79 — CWE-79 Cross-site Scripting (XSS) - Stored

Affected products

VendorProductVersions
ReviveAdserver0 to <=6.0.7

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 26 Jun 2026 07:05 UTC.