AffiliateImporterEb <= 1.0.6 - Reflected XSS
CVE-2024-12732
Verified
Description
AffiliateImporterEb WordPress plugin through 1.0.6 contains a reflected XSS caused by unsanitized and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires crafted request.
Severity
Medium
CVSS Score
6.1
Exploit Probability
1%
Affected Product
affiliateimportereb
Published Date
February 7, 2026
Template Author
sourabh-sahu
CVE-2024-12732.yaml
6.1Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE ID:
cve-2024-12732
CWE ID:
cwe-79
Remediation Steps
Update to the latest version beyond 1.0.6.