CVE-2021-25078

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25078.yaml...

CVE-2021-25078

The CVE affects the WordPress plugin Affiliates Manager up to version 2.9.0. The issue arises because the plugin does not validate, sanitize, or escape the IP address in requests logged by the click-tracking feature, enabling unauthenticated attackers to trigger Cross-Site Scripting when an admin...

CVE-2021-25078 Affiliates Manager < 2.9.0 - Unauthenticated Stored Cross-Site Scripting

The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admin viewing the tracked requests...