CVE-2025-48987
Medium · 6.1CVSS
6.1
EPSS
0.5%
Published
Nov 20, 2025
CISA due date
—
The record
Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|