Description
Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jdwebdesigner | Affiliate Pro | 1.7 | — |
References
- Vulnerability Lab Advisory exploit
- Product Homepage product
- Product Homepage product
- VulnCheck Advisory: Affiliate Pro 1.7 Reflected Cross-Site Scripting via Index Module third-party-advisory