🎯 New Report #3781311: Stored XSS in maintenance tools via unescaped entity names
🔺Severity: Medium
👽 Reporter: an gr y
⭐️ Reputation: 155
🛠 State: resolved
💼 Team: Revive Adserver
💵 Bounty: null
🕐 Submitted: 2026-06-04
⏰ Disclosed: 2026-06-25 13:40:45
📝 Summary: A stored XSS vulnerability was discovered in the maintenance tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected in the maintenance-acl-check.php and maintenance-banners-check.php files.
📂 Report JSON File: 3781311
@hackeronereports