CVE-2025-23431

Name of the Vulnerable Software and Affected Versions: Envato Affiliater versions 1.2.4 and earlier

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or data theft.

Recommendations: For Envato Affiliater versions 1.2.4 and earlier, update to a version that fixes this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.