CVE-2021-39404

Name of the Vulnerable Software and Affected Versions: MaianAffiliate version 1.0

Description: The issue allows an authenticated administrative user to save a cross-site scripting (XSS) attack to the database. This can potentially lead to malicious script execution when the saved data is accessed.

Recommendations: For MaianAffiliate version 1.0, as a temporary workaround, consider restricting access to administrative functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.