High severity7.2NVD Advisory· Published Aug 19, 2025· Updated Apr 15, 2026

CVE-2025-50891

Description

The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software (such as Adform Site Tracking 1.1).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Adform/Adform Site Trackingllm-create
Range: before 2025-08-28

Patches

Vulnerability mechanics

References

github.com/nikolas-ch/CVEs/blob/main/AdformTracking_ReflectedXSS/AdformTracking_ReflectedXSS.txtnvd
github.com/nikolas-ch/CVEs/tree/main/AdformTracking_ReflectedXSSnvd
www.adformhelp.com/hc/en-us/categories/9738364537233-Adform-Site-Trackingnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000