CVE-2021-41420

Description

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.

References

https://www.maianaffiliate.com/

https://github.com/mari0x00/MaianAffiliate-Code-execution-and-XSS/blob/main/README.md

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3