The ThirstyAffiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output escaping.
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
1c