CVE-2026-108559

Revive Adserver versions 6.0.8 and earlier are vulnerable to a reflected cross-site scripting (XSS) flaw in the iframe invocation options. The root cause is the inclusion of the frame_width and frame_height request parameters in HTML attributes without proper encoding when generating invocation t...