Cross site scripting

2017-10-0614:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) site_name, (2) message, or (3) site_url parameter.

CPENameOperatorVersion
profile_builderle2.0.2

CPE	Name	Operator	Version
	profile_builder	le	2.0.2

References

g0blin.co.uk/cve-2014-8492/

wpvulndb.com/vulnerabilities/8239