Reflected XSS Vulnerability in Revive Adserver by Revive Adserver
CVE-2021-22889

6.1MEDIUM

Key Information:

Vendor: Revive-adserver
Status: Https://github.com/revive-adserver/revive-adserver
Vendor: CVE Published:; 25 March 2021

🔔 Create Revive-adserver Vulnerability Alert

What is CVE-2021-22889?

Revive Adserver versions prior to 5.2.0 are susceptible to reflected XSS attacks. This vulnerability arises from inadequate escaping of single quotes in the 'statsBreakdown' parameter of stats.php, allowing an attacker to craft malicious URLs. Users with access to the Revive Adserver interface may be targeted, potentially allowing attackers to execute arbitrary JavaScript code in the context of the user's session. To mitigate this risk, it is crucial to update to the latest version and follow best practices for securing web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch