Vulnerabilities > Getaawp > Amazon Affiliates

DATE CVE VULNERABILITY TITLE RISK
2024-06-06 CVE-2023-6956 Cross-site Scripting vulnerability in Getaawp Amazon Affiliates
The EasyAzon – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘easyazon-cloaking-locale’ parameter in all versions up to, and including, 5.1.0 due to insufficient input sanitization and output escaping.
network
low complexity
getaawp CWE-79
6.1