Post Affiliate Pro

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-38482 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Post Affiliate Pro

NVD

CVSS 3.1

4.8

EPSS

0.3%

CVE-2012-3802 MEDIUM PATCH This Month

Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of other users via unknown attack vectors. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Post Affiliate Pro

NVD

CVSS 2.0

4.0

EPSS

0.3%

CVE-2012-2706 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Post Affiliate Pro

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2023-38482

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Post Affiliate Pro

NVD

CVE-2012-3802

EPSS 0% CVSS 4.0

MEDIUM PATCH This Month

Information Disclosure Post Affiliate Pro

NVD

CVE-2012-2706

EPSS 0% CVSS 4.3

MEDIUM This Month

XSS Post Affiliate Pro

NVD