What is GHSA-qxq8-64vv-45v8?

GHSA-qxq8-64vv-45v8 is a security advisory published by GitHub Security Advisories with High severity. A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and...

Which CVE IDs does GHSA-qxq8-64vv-45v8 cover?

GHSA-qxq8-64vv-45v8 covers the following CVE IDs: CVE-2026-34916. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qxq8-64vv-45v8?

GHSA-qxq8-64vv-45v8 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-qxq8-64vv-45v8HighCVSS 8.8

A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and...

Vendor

GitHub Security Advisories

Published

June 23, 2026

Last Modified

June 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-34916 →

📋 Description

A missing validation of user input when saving delivery limitations in Revive Adserver 6.0.6 and earlier could allow a low‑privileged user to use the logical parameter to inject malicious PHP code into the compiledlimitations field on the database and have it executed during banner delivery. Input sanitisation has been improved to ensure that the parameter is properly validated.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-34916
https://hackerone.com/reports/3656781
https://github.com/advisories/GHSA-qxq8-64vv-45v8