Lucene search
GoogleOSV:CVE-2021-22889HistoryMar 25, 2021 - 8:15 p.m.
CVE-2021-22889
2021-03-2520:15:12
Google
osv.dev
2
revive adserver
reflected xss
vulnerability
stats.php
Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the statsBreakdown parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and pressing a certain key combination to execute injected JavaScript code.
Related
nvd
nvd
CVE-2021-22889
2021-03-25 20:15:12
cve
cve
CVE-2021-22889
2021-03-25 20:15:12
prion
prion
Cross site scripting
2021-03-25 20:15:00
cvelist
cvelist
CVE-2021-22889
2021-03-25 19:40:55
hackerone
hackerone
Revive Adserver: Reflected XSS on /admin/stats.php
2021-02-06 15:07:34