CVE-2025-2077

CVE-2025-2077 – Simple Amazon Affiliate (WordPress) Description: WordPress plugin Simple Amazon Affiliate is vulnerable to Reflected Cross-Site Scripting via the msg parameter in all versions up to and including 1.0.9. The vulnerability arises from insufficient input sanitization and output escap...