Savyour Affiliate Partner Plugin Cross-Site Request Forgery Vulnerability Allowing Stored Cross-Site Scripting

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Savyour Affiliate Partner WordPress plugin, affecting versions through 2.1.4. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks, where malicious scripts can be injected and executed within the user's browser.

Impact

Exploitation of this vulnerability could lead to Stored Cross-Site Scripting, allowing injected scripts to be executed in the context of the user.

Remediation

No official fix is available for this vulnerability. Users are advised to remove and replace the Savyour Affiliate Partner plugin, as it is likely abandoned and will not receive further updates.