CVE-2025-55126
HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages…
Medium · published November 20, 2025
What it is
HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign names being the vector for the stored XSS
The record
Technical detail
- CVSS v3.0
- 6.5 · MEDIUM
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00225 · 12.5th percentile
- Published
- 2025-11-20T19:07Z
EPSS history
Timeline