{"affected":[{"defaultStatus":"unaffected","product":"Adserver","source":"CNA: hackerone","vendor":"Revive","versions":[{"lessThanOrEqual":"6.0.8","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-108564","cwes":["CWE-79"],"description":"A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and earlier allows an unauthenticated attacker to execute JavaScript in an authenticated user's browser by persuading them to visit a crafted URL. When Direct Selection is enabled, an attacker-controlled banner identifier can be included in HTML form fields without appropriate encoding. Direct Selection is disabled by default. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding banner identifier values in the invocation-option form fields.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.7,"severity":"medium","source":"CNA: hackerone","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"}],"modifiedAt":1794418237689,"publishedAt":1794418237689,"references":[{"source":"CNA: hackerone","tags":[],"url":"https://hackerone.com/reports/3942028"}],"remediation":[],"revision":"74f654675c9258b5488bda91696c98795aa5d4840589e036d78dee120667ea7d","sources":[{"modifiedAt":1794418237689,"name":"CNA: hackerone","retrievedAt":1794420665984,"url":"https://www.cve.org/CVERecord?id=CVE-2026-108564"}],"ssvc":null,"status":"published","title":"CVE-2026-108564","updatedAt":1794420665984}