CVE-2021-22889

Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and pressing a certain key combination to execute injected JavaScript code.

• CWE-79
• CWE-79

• https://github.com/revive-adserver/revive-adserver/commit/2f868414Patch, Third Party Advisory
• https://hackerone.com/reports/1097217Exploit, Third Party Advisory
• https://www.revive-adserver.com/security/revive-sa-2021-003/Vendor Advisory
• https://github.com/revive-adserver/revive-adserver/commit/2f868414Patch, Third Party Advisory
• https://hackerone.com/reports/1097217Exploit, Third Party Advisory
• https://www.revive-adserver.com/security/revive-sa-2021-003/Vendor Advisory

Published

Mar 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22883Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vul…7.5
• CVE-2021-22884Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vul…7.5
• CVE-2021-22885A possible information disclosure / unintended method execut…7.5
• CVE-2021-22886Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable …6.1
• CVE-2021-22887A vulnerability in the BIOS of Pulse Secure (PSA-Series Hard…2.3
• CVE-2021-22888Revive Adserver before v5.2.0 is vulnerable to a reflected X…6.1
• CVE-2021-2289Vulnerability in the Oracle Product Hub product of Oracle E-…8.1
• CVE-2021-22890curl 7.63.0 to and including 7.75.0 includes vulnerability t…3.7
• CVE-2021-22891A missing authorization vulnerability exists in Citrix Share…9.8
• CVE-2021-22892An information disclosure vulnerability exists in the Rocket…7.5
• CVE-2021-22893Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to…10
• CVE-2021-22894A buffer overflow vulnerability exists in Pulse Connect Secu…8.8