Affiliates Manager < 2.9.0 - Unauthenticated Stored Cross-Site Scripting
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 2.3%
probabilidad de explotación
2.3%top 18% de las CVE
explotación observada
noninguna fuente lo reporta
The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admin viewing the tracked requests.
Productos afectados
Unknown · Affiliates Manager