Medium severity4.8NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026
CVE-2021-22871
CVE-2021-22871
Description
Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*range: <5.1.0
- (no CPE)range: <5.1.0
- Revive Adserver/Revive Adserverdescription
Patches
Vulnerability mechanics
References
6- github.com/revive-adserver/revive-adserver/commit/62a2a0439nvdPatchThird Party Advisory
- github.com/revive-adserver/revive-adserver/commit/89b88ce26nvdPatchThird Party Advisory
- hackerone.com/reports/819362nvdExploitThird Party Advisory
- packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2021/Jan/60nvdBroken LinkMailing ListThird Party Advisory
- www.revive-adserver.com/security/revive-sa-2021-001/nvdVendor Advisory
News mentions
0No linked articles in our index yet.