https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-41421.htmlhttps://patchthecve.com/cve/CVE-2021-41421.htmlWed, 17 Jun 2026 04:08:29 +0000MEDIUM 4.8: A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.https://patchthecve.com/cve/CVE-2021-41420.htmlhttps://patchthecve.com/cve/CVE-2021-41420.htmlWed, 17 Jun 2026 04:08:29 +0000MEDIUM 5.4: A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.https://patchthecve.com/cve/CVE-2021-39404.htmlhttps://patchthecve.com/cve/CVE-2021-39404.htmlWed, 17 Jun 2026 04:03:40 +0000MEDIUM 4.8: MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.https://patchthecve.com/cve/CVE-2021-39402.htmlhttps://patchthecve.com/cve/CVE-2021-39402.htmlWed, 17 Jun 2026 04:03:40 +0000HIGH 7.2: MaianAffiliate v.1.0 is suffers from code injection by adding a new product via the admin panel. The injected payload is reflected on the affiliate main page for all authenticated and unauthenticated visitors.