Now officially on WordPress.org

CVE Database / CVE-2024-47388

CVE · High

CVE-2024-47388 — Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.1.19

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-47388 Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.1.19 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') High 7.1 < 1.1.19 1.1.19 2024-09-30 —

CVE-2024-47388

The SliceWP plugin contains a reflected cross-site scripting vulnerability affecting versions 1.1.18 and earlier, stemming from improper handling of user input and failure to properly escape output. An attacker without authentication could craft a malicious link containing arbitrary JavaScript code that would execute in a user's browser when clicked, provided the victim can be socially engineered into visiting the link. This flaw was remedied in version 1.1.19.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings