cleantalk
Vulnerabilities and Security Researches

WordPress Affiliates Plugin — SliceWP Affiliates, 9d9b5ca8-72e2-409a-ac6d-543f6f3e7920

Published on
-
Research Description
Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.0.46 SliceWP &lt; 1.0.46 - Reflected Cross-Site Scripting (XSS) The plugin does not escape the converted parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
Affected versions
max 1.0.46.
Status
vulnerable