CVE-2026-50742: XSS
A stored XSS vulnerabilities exists in the maintenance-acl-check.php and maintenance-banners-check.php tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-50742?
The severity of CVE-2026-50742 is classified as medium with a CVSS score of 4.4.
How do I fix CVE-2026-50742?
To fix CVE-2026-50742, ensure that entity names are properly escaped before being displayed in the maintenance-acl-check.php and maintenance-banners-check.php files.
What type of vulnerability is CVE-2026-50742?
CVE-2026-50742 is a stored cross-site scripting (XSS) vulnerability.
What applications are affected by CVE-2026-50742?
CVE-2026-50742 affects Revive Adserver version 6.0.7.
What impact does CVE-2026-50742 have?
The impact of CVE-2026-50742 allows an attacker to execute arbitrary scripts in the context of an admin user.