CVE-2022-44586

Auth. (admin+) Stored Cross-Site Scripting (XSS) in Ayoub Media AM-HiLi plugin <= 1.0 on WordPress.

Score

CVSS 3.1 4.8 Medium

Status

Modified - audit@patchstack.com

Published

2022-11-02

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Am-hili (Am-hili Project)
• Am-hili Wordpress Plugin (Ayoub Media)

References

• https://patchstack.com/database/vulnerability/am-hili-affiliate-manager-for-publishers/wordpress-am-hili-plugin-1-0-aut…
• https://wordpress.org/plugins/am-hili-affiliate-manager-for-publishers/