CVE-2022-2799
16.09.2022, 09:15
The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| Vendor | Product | Version |
|---|---|---|
| wpaffiliatemanager | affiliates_manager | 𝑥 < 2.9.14 |
𝑥
= Vulnerable software versions