CVE-2025-67537

CVE-2025-67537 is a stored cross-site scripting vulnerability in the WordPress plugin “ThirstyAffiliates”. The issue is described as improper input neutralization during web page generation, enabling Stored XSS in ThirstyAffiliates versions from n/a through 3.11.8. The vulnerability affects the p...