PT-2026-3994 · Seoseon Europe S.L · Affiliate Link Tracker

Published 2026-01-22 · Updated 2026-01-25 · CVE-2025-62077

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SEOSEON EUROPE S.L Affiliate Link Tracker versions through 0.2

Description The Affiliate Link Tracker software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored and executed within the application, potentially affecting users who interact with the affected web pages.

Recommendations Update Affiliate Link Tracker to a version greater than 0.2.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62077

Affected Products

Affiliate Link Tracker

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-62077 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/affiliate-link-tracker/vulnerability/wordpress-affiliate-link-tracker-plugin-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2015448679268708397 · Twitter Post