Reflected XSS Vulnerability in Revive Adserver by Revive Software

CVE-2021-22874

What is CVE-2021-22874?

Revive Adserver versions prior to 5.1.1 are susceptible to a reflected cross-site scripting (XSS) attack that can be exploited via the 'period_preset' parameter in the userlog-index.php file. This vulnerability allows attackers to inject malicious scripts into web pages viewed by users, potentially compromising sensitive information and the integrity of the web application's interactions. Users are advised to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References