Medium severity5.5NVD Advisory· Published Nov 29, 2022· Updated Jun 17, 2026
CVE-2022-3897
CVE-2022-3897
Description
The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 6.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:tipsandtricks-hq:wp_affiliate_platform:*:*:*:*:*:wordpress:*:*Range: <=6.3.9
- Range: <=6.3.9
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.