Persistent XSS Vulnerability in Revive Adserver
CVE-2021-22871

4.8MEDIUM

Key Information:

Vendor: Revive-adserver
Status: Https://github.com/revive-adserver/revive-adserver
Vendor: CVE Published:; 26 January 2021

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2021-22871?

Revive Adserver prior to version 5.1.0 is vulnerable to a persistent cross-site scripting (XSS) flaw. This vulnerability allows authenticated users with manager privileges to inject potentially harmful scripts into the URL website property. These scripts are rendered unsanitized within the affiliate-preview.php tag generation screen, enabling attackers to execute arbitrary scripts in the context of users who visit the affected page, which could lead to data theft and session hijacking.