Unrated severityNVD Advisory· Published Mar 18, 2021· Updated Aug 3, 2024
ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS
CVE-2021-24127
Description
Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS), which could lead to privilege escalation.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/1fbd9f7a-6f99-45a2-9d57-01631a1f35d6mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.