A vulnerability classified as problematic has been found in Revive Adserver up to 6.0.4. This affects an unknown function of the file banner-acl.php. This manipulation of the argument acls[0][executionorder] causes cross site scripting.
This vulnerability is registered as CVE-2026-21642. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
