CVE-2026-44960
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A stored XSS can be exploited by leveraging the usernames as an attack vector. When an admin user viewed the audit log details for affected entries, any malicious JavaScript payload embedded in the username would be executed due to missing output sanitisation. Proper escaping has been added to the audit log details output.
| CWE | CWE-79 |
| Vendor | revive |
| Product | adserver |
| Published | Jun 23, 2026 |
| Last Updated | Jun 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for revive adserver
Be the first to know when new unknown vulnerabilities affecting revive adserver are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N Affected Versions
Revive / Adserver
0 ≤ 6.0.6
Credits
🔍 barcrange (3l4)