CVE-2021-22875: Revive-Adserver Revive Adserver

Medium severity, CVSS 6.1. EPSS: 18.2% chance of exploitation in the next 30 days.

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter.

Affected products

• Revive-Adserver Revive Adserver: before 5.1.1 (fixed in 5.1.1)

Published 2021-01-28. Last modified 2026-06-17.