CVE-2021-41420

5.4 mediumEPSS 0.7%

Medium (5.4) in maianmedia maianaffiliate. EPSS 0.7% chance of exploitation in the next 30 days.

A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-06-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

maianmedia:maianaffiliate

References

https://github.com/mari0x00/MaianAffiliate-Code-execution-and-XSS/blob/main/README.md
https://www.maianaffiliate.com/
https://github.com/mari0x00/MaianAffiliate-Code-execution-and-XSS/blob/main/README.md
https://www.maianaffiliate.com/

Check your stack JSON