Security Advisory

CVE-2025-52668

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-20 19:11:36
Last updated 2025-11-20 21:33:11
Assigner hackerone
State PUBLISHED

Description

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack.