CVE-2021-22871

Published: 2021-01-26T18:16Z

Last Modified: 2024-11-21T05:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt