PatchTheCVEmaianaffiliate vulnerabilities and fixes
Recent CVEs affecting maianaffiliate, with upgrade or downgrade steps. 4 tracked.
maianaffiliate has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-06-16. Highest priority: CVE-2021-39402 (score 48/100).
- CVE-2021-41421 MEDIUM 4.8 DOWNGRADE A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE throug
- CVE-2021-41420 MEDIUM 5.4 DOWNGRADE A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript c
- CVE-2021-39404 MEDIUM 4.8 DOWNGRADE MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.
- CVE-2021-39402 HIGH 7.2 DOWNGRADE MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel
FAQ
How do I fix maianaffiliate vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is maianaffiliate being exploited right now?
None of the tracked maianaffiliate CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which maianaffiliate CVE should I patch first?
CVE-2021-39402 currently ranks highest (48/100): MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel.