medium5.4
CVE-2021-24127
Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authen…
Impact
Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS), which could lead to privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Caseproof | Thirstyaffiliates Affiliate Link Manager | before 3.9.3 |