Reflected XSS Vulnerability in Revive Adserver by Revive
CVE-2021-22888

6.1MEDIUM

Key Information:

Vendor: Revive-adserver
Status: Https://github.com/revive-adserver/revive-adserver
Vendor: CVE Published:; 25 March 2021

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2021-22888?

Revive Adserver prior to version 5.2.0 is susceptible to a reflected Cross-Site Scripting (XSS) vulnerability. This occurs in the status parameter of the campaign-zone-zones.php file, where an attacker can craft a malicious URL. If a user with access to the Revive Adserver interface inadvertently clicks this link, it can lead to the execution of arbitrary JavaScript code in their browser, potentially compromising user data and the server's integrity. It is crucial for users to update to the latest version to mitigate this risk.