Filtered by vendor Maianmedia Subscriptions
Filtered by product Maianaffiliate Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-41421 1 Maianmedia 1 Maianaffiliate 2024-08-04 4.8 Medium
A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.
CVE-2021-41420 1 Maianmedia 1 Maianaffiliate 2024-08-04 5.4 Medium
A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.
CVE-2021-39402 1 Maianmedia 1 Maianaffiliate 2024-08-04 7.2 High
MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors.