Reflected XSS Vulnerability in Revive Adserver by Revive

CVE-2021-22872

What is CVE-2021-22872?

Revive Adserver prior to version 5.1.0 is susceptible to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. This weakness primarily affects older browsers that do not perform automatic URL encoding on parameters, making them vulnerable to injection attacks. Security measures implemented in modern browsers do not mitigate this issue, requiring users of outdated browsers like Internet Explorer 10 to take action to safeguard against potential exploits.

References