CVE-2023-53931

Medium · 6.1

CVSS

6.1

EPSS

2.7%

Published

Dec 17, 2025

CISA due date

—

The record

Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configuration page that allows attackers to inject malicious scripts. Attackers can craft a malicious link to the banner-advanced.php endpoint with XSS payloads in prepend and append parameters to execute arbitrary JavaScript when an admin views the page.

Affected packages

Ecosystem	Package	Introduced	Fixed