Lucene search
HistoryJan 13, 2024 - 12:15 a.m.
CVE-2024-22142
cozmoslabs profile builder pro
cross-site scripting
reflected xss
security vulnerability
cve-2024-22142
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Cozmoslabs Profile Builder Pro allows Reflected XSS.This issue affects Profile Builder Pro: from n/a through 3.10.0.
Affected configurations
Node
cozmoslabsprofile_builderRange≤3.10.0wordpress
Related
cve
cve
CVE-2024-22142
2024-01-13 00:15:44
cvelist
cvelist
wpvulndb
wpvulndb
Profile Builder Pro < 3.10.1 - Reflected Cross-Site Scripting
2024-01-18 00:00:00
prion
prion
Cross site scripting
2024-01-13 00:15:00
wordfence
wordfence
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for NVD:CVE-2024-22142