Aller au contenu
Se connecter
Non notée

CVE-2021-24127 Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions…

Description

Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS), which could lead to privilege escalation.

Produits et versions touchés

Produit Versions touchées Corrigé en
ThirstyAffiliates 3.9 premières → < 3.9.3 3.9.3

Autres CVE de ThirstyAffiliates

Les 3 CVE de ThirstyAffiliates →
CVE-2026-97314 The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its… 6.5 Moyenne CVE-2022-0634 The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image… Non notée
Suivre cette CVE