CVE-2025-27208
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the Revive Adserver UI into clicking a crafted URL and execute injected JavaScript in the victim's browser context. The vulnerability is present in admin-search.php and can be exploited via the compact parameter.
Risk Assessment
An attacker can execute arbitrary JavaScript in the victim's browser, potentially performing actions on the user's behalf, although the session cookie cannot be accessed. This may lead to data modification or other unwanted operations in the admin panel.
Recommendation
Upgrade Revive Adserver to a version containing the XSS fix. Until patched, avoid clicking unknown links leading to the admin panel.
Other vulnerabilities in Revive Adserver
See all- CVE-2026-44959High
A missing validation of user input exists when saving delivery limitations in Revive Adserver 6.0.6 and earlier. A low-privileged user could add an unexpected component parameter and inject malicious PHP code into the compiledlimitations field, which would then be executed during banner delivery.
- CVE-2026-44958Medium
The vulnerability allows advertiser-level users to activate or deactivate a banner in Revive Adserver 6.0.6 and earlier, even when such permissions were not granted. The banner-edit.php script allowed the banner status to be overwritten solely based on banner edit permissions.
- CVE-2026-34916High
A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier could allow a low-privileged user to inject malicious PHP code into the compiledlimitations field on the database, resulting in its execution during banner delivery.
- CVE-2016-9456High
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver team conducted a security audit of the admin interface scripts to identify and fix other potential CSRF vulnerabilities.
- CVE-2016-9455High
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). Several scripts in Revive Adserver's user interface are vulnerable to these attacks.
- CVE-2016-9127High
Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF) in the password recovery form. This vulnerability could be exploited to send a large number of password recovery emails to registered users.
- CVE-2015-7372High
Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter.
- CVE-2015-7369High
The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before version 3.2.2 does not restrict access from other domains, allowing remote attackers to conduct cross-domain attacks via unspecified vectors.
- CVE-2015-7367High
Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been deleted or unlinked.
- CVE-2016-9470Critical
Revive Adserver versions before 3.2.5 and 4.0.0 are vulnerable to Reflected File Download (RFD) attacks. Attackers can exploit the vulnerability in `www/delivery/asyncspc.php` to remotely download a file onto the victim's machine.
Original NVD description (English source)
A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context of the victim's browser. The session cookie cannot be accessed, but a number of other operations could be performed. The vulnerability is present in the admin-search.php file and can be exploited via the compact parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS