CVE-2025-55123: Revive-Adserver Revive Adserver

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

Affected products

• Revive-Adserver Revive Adserver: version 6.0.0 only

Published 2025-11-20. Last modified 2026-09-26.