CVE-2026-50742
- State
- Published
- Severity
- 4.4 Medium
- Published
- Jun 26, 2026
- Updated
- Jun 26, 2026
- Reserved
- Jun 6, 2026
Description
A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 4.4 Medium | CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N | hackerone |
Weaknesses
- CWE-79 Cross-site Scripting (XSS) - Stored
Affected Products
| Product | Versions |
|---|---|
AdserverRevive |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.