CVE-2021-47911: Jdwebdesigner Affiliate Pro

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Affiliate Pro 1.7 contains multiple reflected cross-site scripting vulnerabilities in the index module's input fields. Attackers can inject malicious scripts through fullname, username, and email parameters to execute client-side attacks and manipulate browser requests.

Affected products

• Jdwebdesigner Affiliate Pro: version 1.7 only

Published 2026-02-01. Last modified 2026-06-17.