Reflected Cross-Site Scripting in WP Affiliate Platform Plugin for WordPress

CVE-2022-3896

What is CVE-2022-3896?

The WP Affiliate Platform plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject malicious web scripts via manipulated URLs, which could execute on the user’s browser if they interact with a crafted link. While modern browser security features may mitigate the risk, the potential for exploitation remains significant.

References