Threats tagged 'ghsa-946h-wfq6-pvr8'

The Affiliate AI Lite WordPress plugin versions up to and including 1.0.1 contain a stored cross-site scripting (XSS) vulnerability via the 'asin' shortcode attribute in the affiai_img shortcode. This vulnerability arises from insufficient input sanitization and output escaping, allowing authenticated users with contributor-level or higher access to inject malicious scripts that execute when other users view the affected pages.