Input validation vulnerability in Affiliate Power – Sales Tracking for Affiliate Marketers 2.2.0

The Affiliate Power – Sales Tracking for Affiliate Marketers plugin for WordPress is vulnerable to a type of security threat known as Reflected Cross-Site Scripting. This threat can be found in versions 2.2.0 and earlier of the plugin. It occurs when the plugin does not properly sanitize or escape the ‘page’ parameter. This can allow attackers to inject malicious web scripts into pages that will be executed if a user is tricked into clicking on a link.