CVE-2023-53931: Revive Adserver 5.4.1 Cross-Site Scripting via Banner Advanced Settings

Published Dec 17, 2025

Updated

Revive Adserver 5.4.1 contains a cross-site scripting vulnerability in the banner advanced configuration page that allows attackers to inject malicious scripts. Attackers can craft a malicious link to the banner-advanced.php endpoint with XSS payloads in prepend and append parameters to execute arbitrary JavaScript when an admin views the page.

Affected Software

2 affected components

Revive Adserver

revive-adserver Revive Adserver=5.4.1

Event History

Dec 17, 2025

CVE Published

via MITRE·10:44 PM

Data Sourced

via MITRE·10:44 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Aug 25, 58235

Event

via NVD·06:44 AM

Frequently Asked Questions

What is the severity of CVE-2023-53931?

CVE-2023-53931 is classified as a medium severity cross-site scripting vulnerability.

How do I fix CVE-2023-53931?

To fix CVE-2023-53931, upgrade to the latest version of Revive Adserver where the vulnerability is patched.

What impact does CVE-2023-53931 have on affected systems?

CVE-2023-53931 allows attackers to inject malicious scripts into the banner advanced configuration page, potentially compromising user data.

Can CVE-2023-53931 be exploited remotely?

Yes, CVE-2023-53931 can be exploited remotely via crafted links to the banner-advanced.php endpoint.

Which versions of Revive Adserver are affected by CVE-2023-53931?

CVE-2023-53931 affects Revive Adserver version 5.4.1.