CVE-2024-5281

The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-5281

The CVE-2024-5281 entry is valid and supported by connected sources describing a Reflected XSS in the WP Affiliate Platform plugin (versions before 6.5.1) caused by not sanitising/escaping a parameter before echoing it to the page. Impact is noted as potentially exploitable against admin/high-pri...

CVE-2024-5281 WP Affiliate Platform < 6.5.1 - Reflected XSS via Affiliate Editing

The wp-affiliate-platform WordPress plugin before 6.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...