CVE-2024-8478

Name of the Vulnerable Software and Affected Versions: The Affiliate Super Assistent plugin for WordPress versions up to, and including, 1.5.3

Description: The issue is due to the software allowing users to supply arbitrary shortcodes in comments when the 'Parse comments' option is enabled. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

Recommendations: For versions up to, and including, 1.5.3, consider disabling the 'Parse comments' option to prevent arbitrary shortcode execution until a patch is available. Restrict access to commenting functionality to minimize the risk of exploitation.