Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2021-47911

Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module

Description

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jdwebdesigner Affiliate Pro

Default version status: unaffected

  • 1.7affected

References