Lucene search
CVE-2022-4831
The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 is prone to Stored Cross-Site Scripting
Show more
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode | 6 Jan 202300:00 | – | wpexploit |
 | WordPress Custom User Profile Fields Plugin <= 1.8 is vulnerable to Cross Site Scripting (XSS) | 6 Jan 202300:00 | – | patchstack |
 | Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode | 6 Jan 202300:00 | – | wpvulndb |
 | Cross site scripting | 30 Jan 202321:15 | – | prion |
 | CVE-2022-4831 Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode | 30 Jan 202320:31 | – | cvelist |
 | CVE-2022-4831 | 30 Jan 202321:15 | – | nvd |
Node
[
{
"vendor": "Unknown",
"product": "Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.8.1"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| button | nested | /wp-content/plugins/custom-user-profile-fields-for-user-registration/shortcode.php | Stored Cross-Site Scripting vulnerability allowing contribution of malicious scripts via shortcode attributes. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo30 Jan 2023 21:15Current
5.3Medium risk
Vulners AI Score5.3
CVSS35.4
EPSS0.00054