Reflected XSS Vulnerability in Revive Adserver by Revive
CVE-2021-22888

6.1MEDIUM

Key Information:

Vendor: Revive-adserver
Status: Https://github.com/revive-adserver/revive-adserver
Vendor: CVE Published:; 25 March 2021

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2021-22888?

Revive Adserver prior to version 5.2.0 is susceptible to a reflected Cross-Site Scripting (XSS) vulnerability. This occurs in the status parameter of the campaign-zone-zones.php file, where an attacker can craft a malicious URL. If a user with access to the Revive Adserver interface inadvertently clicks this link, it can lead to the execution of arbitrary JavaScript code in their browser, potentially compromising user data and the server's integrity. It is crucial for users to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch