CVE-2025-55123: XSS
Published Nov 20, 2025
·Updated
Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.
Affected Software
2 affected components
Revive Adserver<=5.5.2, <6.0.1
revive-adserver Revive Adserver=6.0.0
Event History
Nov 20, 2025
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
DescriptionSeverity
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Jul 23, 57899
Event
via NVD·04:17 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-55123?
CVE-2025-55123 is classified as a critical severity vulnerability due to its potential for arbitrary code execution via XSS attacks.
2
How do I fix CVE-2025-55123?
To resolve CVE-2025-55123, upgrade to Revive Adserver version 6.0.2 or later, which contains the necessary security patches.
3
What software versions are affected by CVE-2025-55123?
CVE-2025-55123 affects Revive Adserver versions 5.5.2 and 6.0.1 and earlier.
4
What type of vulnerability is CVE-2025-55123?
CVE-2025-55123 is an XSS vulnerability caused by improper input handling in Revive Adserver.
5
Who can exploit CVE-2025-55123?
CVE-2025-55123 can be exploited by manager account users to launch XSS attacks against their own advertiser users.