Revive Adserver · disclosed reports
Cross-site Scripting
26 disclosed reports · $0 paid · 26 valid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.
Open Revive Adserver on HackerOne- reports
- 26
- valid
- 26
- paid a bounty
- 0
Every one of the 26 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Reflected Cross-Site Scripting (XSS) in Revive Adserver 5.5.2
- Reflected XSS in banner-acl.php and channel-acl.php via executionorder
- [revive-adserver] Reflected XSS in Banner Delivery Options via cap parameter
- Reflected XSS in afr.php
- Stored-XSS in campaign name displayed in Banners modal
- Reflected XSS via unsanitised refresh parameter in zone invocation tag
- Stored XSS in Conversion Statistics via Tracker Name
- Reflected XSS via clientid parameter in zone‑include.php
- Stored XSS in maintenance tools via unescaped entity names
- Reflected XSS on /admin/stats.php
- Stored XSS via Full Name field in userlog email entries
- Stored-XSS in Banner Name field
- Reflected XSS in account-preferences-plugin.php
- Reflected XSS on /admin/userlog-index.php
- Reflected XSS in /admin/banner-zone.php (v6.0.0+)
- Stored XSS on inventory-retrieve.php
- Reflected XSS on /www/delivery/afr.php (bypass of report #775693)
- Reflected XSS on www/delivery/afr.php
- Reflected XSS in stats‑video.php via improperly encoded URL parameters
- Reflected XSS on /admin/stats.php
- Stored XSS on Admin Access Page - Email field
- Stored XSS via malicious usernames in audit log details + Username validation bypass in XML‑RPC addUser
- Reflected XSS on /admin/stats.php
- Reflected XSS on /admin/campaign-zone-zones.php
- Reflected XSS on Zones > Invocation Code
- Reflected XSS in Step 2 of the Installation
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP