CVE-2025-48987: XSS
Published Nov 20, 2025
·Updated
Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.
Affected Software
3 affected components
Revive Adserver<6.0.1
revive-adserver Revive Adserver<=5.5.2
revive-adserver Revive Adserver>=6.0.0<=6.0.1
Event History
Nov 20, 2025
CVE Published
via MITRE·07:11 PM
Data Sourced
via MITRE·07:11 PM
DescriptionSeverity
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-48987?
CVE-2025-48987 has been classified as a high-severity vulnerability due to its potential for reflected XSS attacks.
2
How do I fix CVE-2025-48987?
To fix CVE-2025-48987, upgrade Revive Adserver to version 6.0.2 or later where the vulnerability has been addressed.
3
Which versions of Revive Adserver are affected by CVE-2025-48987?
CVE-2025-48987 affects Revive Adserver versions 5.5.2, 6.0.1, and all earlier versions.
4
What type of vulnerability is CVE-2025-48987?
CVE-2025-48987 is classified as an improper neutralization of input, leading to potential reflected XSS vulnerabilities.
5
Can CVE-2025-48987 be exploited remotely?
Yes, CVE-2025-48987 can be exploited remotely by an attacker through crafted input, resulting in reflected XSS attacks.