MaianAffiliate
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-41420 | Med | 0.35 | 5.4 | 0.01 | Jun 16, 2022 | A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel. | ||
| CVE-2021-41421 | Med | 0.31 | 4.8 | 0.00 | Jun 16, 2022 | A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel. | ||
| CVE-2021-39404 | Med | 0.31 | 4.8 | 0.01 | Sep 22, 2021 | MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database. |
- risk 0.35cvss 5.4epss 0.01
A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.
- risk 0.31cvss 4.8epss 0.00
A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.
- risk 0.31cvss 4.8epss 0.01
MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.