CVE-2021-22874CWE-79

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter

published January 28, 2021

CVSS

—

EPSS

18%

Percentile

97.2

In the wild

Unconfirmed

What it is

Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.18242 · 97.2th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2021-01-28T16:09Z

EPSS history

Timeline

28 JAN 16:09Z
Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter
cvelistv5