What is GHSA-q7h4-cw8q-5rmq?

GHSA-q7h4-cw8q-5rmq is a security advisory published by GitHub Security Advisories with Medium severity. A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners...

Which CVE IDs does GHSA-q7h4-cw8q-5rmq cover?

GHSA-q7h4-cw8q-5rmq covers the following CVE IDs: CVE-2026-50742. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q7h4-cw8q-5rmq?

GHSA-q7h4-cw8q-5rmq has a CVSS v3 base score of 4.4, published by GitHub Security Advisories.

GHSA-q7h4-cw8q-5rmqMediumCVSS 4.4

A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners...

Vendor

GitHub Security Advisories

Published

June 26, 2026

Last Modified

June 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-50742 →

📋 Description

A stored XSS vulnerabilities exists in the maintenance-acl-check.php and maintenance-banners-check.php tools of Revive Adserver 6.0.7. The issue was caused by entity names being displayed without proper escaping when inconsistencies were detected. Whether the XSS payload is executed when an administrator uses the affected maintenance tools is not entirely under the attacker's control.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-50742
https://hackerone.com/reports/3781311
https://github.com/advisories/GHSA-q7h4-cw8q-5rmq