---
id: "CVE-2026-108562"
page: "https://infrastack.ai/live/CVE-2026-108562"
kind: "vulnerability"
aliases: ["CVE-2026-108562"]
title: "Revive Adserver: stored script injection via tracker names in maintenance page"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "php", "revive-adserver", "self-hosted"]
not_affected_if: ["no-manager-accounts", "version-6.0.9-or-later"]
published_at: "2026-11-11T18:18:26+00:00"
first_seen_at: "2026-11-11T18:28:42+00:00"
updated_at: "2026-11-11T18:29:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108562", "first_seen_at": "2026-11-11T18:28:42+00:00"}]
exploit_sources: []
---

# Revive Adserver: stored script injection via tracker names in maintenance page

Link for people: https://infrastack.ai/live/CVE-2026-108562 (this .md is for agents)

A manager in Revive Adserver can save a tracker name containing JavaScript, which then appears unescaped on the append-code maintenance results page. When an administrator opens that page, the script runs in the administrator's browser.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Revive Adserver version; `6.0.8` and earlier are affected.
- Review existing tracker names for HTML or script content.

## Fix

- Revive Adserver: move to `6.0.9` or later.

## Timeline

- 2026-11-11T18:28:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108562

## From the sources

A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to execute JavaScript in an administrator's browser. A manager can store a malicious tracker name and cause the tracker to appear in the append-code maintenance results. When an administrator opens the affected maintenance page, the tracker name is included in HTML without appropriate encoding. The issue is fixed in Revive Adserver 6.0.9 by HTML-encoding tracker names when displaying the maintenance results.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_