TI-2024-33178 CVE-2024-49692 · GHSA-2p7v-jf66-6gm9WordPress AffiliateX plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPCenter AffiliateX affiliatex allows Stored XSS.This issue affects AffiliateX: from n/a through <= 1.2.9.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00254 · Published 2024-10-29 · No fix listed CWE-79