A reflected cross-site scripting (XSS) vulnerability exists in Revive Adserver version 6.0.0 and later due to improper neutralization of input in the banner-zone.php script. This vulnerability allows an attacker to inject malicious scripts that are reflected back to users, potentially leading to limited confidentiality and integrity impacts. The vulnerability has a CVSS 3.0 score of 6.1, indicating a medium severity level.