CVE-2023-39641: Activedesign Full Affiliates

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent().

Affected products

• Activedesign Full Affiliates: before 1.9.8 (fixed in 1.9.8)

Published 2023-09-15. Last modified 2026-06-17.