CVE-2026-50745: Revive Adserver: siteler arası betik çalıştırma (XSS)

Açıklama (NVD)

A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were constructed did not follow best practices, and the output of the Smarty custom helper function url was neither properly encoded nor sanitised, allowing user‑supplied input to be reflected without escaping.

Özet bilgiler

Ürün

Revive-adserver Revive Adserver

CVSS v3.1

6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

%0,38 (yüzdelik 32)

CWE

CWE-79

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• hackerone.com
• CWE-79