Security Advisory

CVE-2025-52668

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-20 19:11:36
Last updated 2025-11-20 21:33:11
Assigner hackerone
CVSS score 8.7
State PUBLISHED

Description

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack.