Reflected XSS Vulnerability in Revive Adserver by Revive Adserver Inc.

CVE-2025-55124

What is CVE-2025-55124?

A vulnerability in Revive Adserver versions 6.0.0 and above allows attackers to exploit improper input neutralization in the banner-zone.php script. This can lead to reflected XSS attacks, where malicious scripts are executed in the context of a user's browser. The lack of proper input sanitization poses significant risks for data leakage and user session hijacking, thereby compromising the security of the affected web applications.

References