Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AffiliateX allows Stored XSS.This issue affects AffiliateX: from n/a through 1.2.9.
References
| Link | Resource |
|---|---|
| https://patchstack.com/database/vulnerability/affiliatex/wordpress-affiliatex-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve | Third Party Advisory |
Configurations
History
08 Nov 2024, 14:55
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Affiliatexblocks
Affiliatexblocks affiliatex |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:affiliatexblocks:affiliatex:*:*:*:*:*:wordpress:*:* | |
| References | () https://patchstack.com/database/vulnerability/affiliatex/wordpress-affiliatex-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve - Third Party Advisory |
29 Oct 2024, 14:34
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
29 Oct 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-29 11:15
Updated : 2024-11-08 14:55
NVD link : CVE-2024-49692
Mitre link : CVE-2024-49692
CVE.ORG link : CVE-2024-49692
JSON object : View
Products Affected
affiliatexblocks
- affiliatex
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')