A vulnerability was found in AffiliateX Plugin up to 1.0.0/1.3.9.3 on WordPress. It has been rated as problematic. The impacted element is the function
save_customization_settings of the component Setting Handler. Performing a manipulation results in cross site scripting.
This vulnerability is identified as CVE-2025-13859. The attack can be initiated remotely. There is not any exploit available.
