CVE-2025-55126

Publication date

2025-11-20 19:07:42

Family

hackerone

State

PUBLISHED

Description

HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS