MaianAffiliate v1.0 allows an authenticated administrative user to save an XSS to the database.
CWE-79