Cross-site Scripting Vulnerability in Affiliate Links Manager by Winking

CVE-2025-27273

What is CVE-2025-27273?

The Affiliate Links Manager by Winking is exposed to a Cross-site Scripting vulnerability due to improper input handling during web page generation. This flaw allows attackers to inject malicious scripts, which can be executed in the context of a user's browser, potentially compromising sensitive information. Users of the plugin, particularly those on versions from n/a to 1.0, are strongly advised to implement necessary security measures to mitigate the risks associated with this vulnerability.

References