CVE-2021-22871: Revive-Adserver Revive Adserver

Medium severity, CVSS 4.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability.

Affected products

• Revive-Adserver Revive Adserver: before 5.1.0 (fixed in 5.1.0)

Published 2021-01-26. Last modified 2026-06-17.