Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Affiliates Manager 2.9.14 Clear all filters
TI-2022-02594 CVE-2022-2799 · GHSA-gg3w-9qrw-p79x

Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capabi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00677 Published 2022-09-16 Fixed in 2.9.14 CWE-79
TI-2022-02593 CVE-2022-2798 · GHSA-j77h-m5qv-6jf7

Affiliates Manager < 2.9.14 - Affiliate CSV Injection

Priority LOW 37

The Affiliates Manager WordPress plugin before 2.9.14 does not validate and sanitise the affiliate data, which could allow users registering as affiliate to perform CSV injection attacks against an admin exporting the da…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01226 Published 2022-09-16 Fixed in 2.9.14 CWE-1236