Lucene search
Rafie Muhammad (Patchstack)PATCHSTACK:B5703F1CC9B345576110DA8329D8DA52HistoryJul 18, 2023 - 12:00 a.m.
WordPress Affiliate Link Builder Plugin for Amazon Associates – Review Engine Plugin <= 1.0.41 is vulnerable to Cross Site Scripting (XSS)
2023-07-1800:00:00
Rafie Muhammad (Patchstack)
patchstack.com
1
wordpress
affiliate link builder
amazon associates
cross site scripting
vulnerability
version 1.0.41
medium severity
AI Score
6.4
Confidence
Low
Software
Affiliate Link Builder Plugin for Amazon Associates – Review Engine
Type
Plugin
Vulnerable versions
<= 1.0.41
Fixed in
N/A
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2023-33999
Patch priority
Medium
CVSS severity
Medium (7.1)
Developer
Claim ownership
PSID
8d417770b3de
Credits
Rafie Muhammad (Patchstack)
Required privilege
Unauthenticated
Published
18 July, 2023
Expand full details Have additional information or questions about this entry? Let us know.
Solution
We advise to mitigate or resolve the vulnerability immediately.
Affected configurations
Node
amazon_affiliate_store_projectamazon_affiliate_storeRange≤1.0.41
| Vendor | Product | Version | CPE |
|---|---|---|---|
| amazon_affiliate_store_project | amazon_affiliate_store | * | cpe:2.3:a:amazon_affiliate_store_project:amazon_affiliate_store:*:*:*:*:*:*:*:* |
Related
wpvulndb
wpvulndb
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
2023-07-25 00:00:00
patchstack
patchstack