Reflected XSS Vulnerability in Revive Adserver by Revive Software
CVE-2021-22874

6.1MEDIUM

Key Information:

Vendor: Revive-adserver
Status: Https://github.com/revive-adserver/revive-adserver
Vendor: CVE Published:; 28 January 2021

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2021-22874?

Revive Adserver versions prior to 5.1.1 are susceptible to a reflected cross-site scripting (XSS) attack that can be exploited via the 'period_preset' parameter in the userlog-index.php file. This vulnerability allows attackers to inject malicious scripts into web pages viewed by users, potentially compromising sensitive information and the integrity of the web application's interactions. Users are advised to update to the latest version to mitigate this risk.