Input validation vulnerability in Affiliates Manager 2.9.13

The Affiliates Manager plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This issue exists in versions of the plugin up to and including 1.10. It is possible for an unauthenticated attacker (someone who has not been authorized) to inject malicious web scripts into pages if they can convince a user to perform an action like clicking a link. This is because the plugin does not properly sanitize and escape input data.