medium5.4
CVE-2021-47911
Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields.
Impact
Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://codecanyon.net/item/affiliate-pro-affiliate-management-system/12908496
- https://jdwebdesigner.com/
- https://www.vulncheck.com/advisories/affiliate-pro-reflected-cross-site-scripting-via-index-module
- https://www.vulnerability-lab.com/get_content.php?id=2281
- https://www.vulnerability-lab.com/get_content.php?id=2281