Description (CNA)
Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jdwebdesigner / Affiliate Pro | affected 1.7 |
CWE
CWE-79
References
- https://www.vulnerability-lab.com/get_content.php?id=2281
- https://jdwebdesigner.com/
- https://codecanyon.net/item/affiliate-pro-affiliate-management-system/12908496
- https://www.vulncheck.com/advisories/affiliate-pro-reflected-cross-site-scripting-via-index-module
ADP enrichment
No English description supplied.