Maianaffiliate

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-39404 Sep 22, 13:15 MEDIUM POC This Month

MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Maianaffiliate

NVD GitHub

CVSS 3.1

4.8

EPSS

0.5%

CVE-2021-39402 Sep 20, 15:15 HIGH POC This Week

MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Code Injection Maianaffiliate Maianmedia

NVD GitHub

CVSS 3.1

7.2

EPSS

1.3%

CVE-2021-39404

EPSS 1% CVSS 4.8

MEDIUM POC This Month

XSS Maianaffiliate

NVD GitHub

CVE-2021-39402

EPSS 1% CVSS 7.2

HIGH POC This Week

RCE Code Injection Maianaffiliate +1

NVD GitHub