cleantalk
Vulnerabilities and Security Researches

Affiliate Power – Sales Tracking for Affiliate Marketers, 3ceba7d6-4034-4220-9d2e-89f59c2050e3

Published on
-
Research Description
Affiliate Power &#8211; Sales Tracking for Affiliate Marketers [affiliate-power] < 2.3.0 Affiliate Power &lt; 2.3.0 - Reflected Cross-Site Scripting The plugin does not escape the page parameter in its Affiliate Power Sales dashboard before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue
Affected versions
max 2.3.0.
Status
vulnerable