CVE-2022-0233: Improper Neutralization of Input During Web Page Generation

The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the pmuseravatar and pmcoverimage parameters found in the /admin/class-profile-magic-admin.php file which allows attackers with...

PT-2022-13052

Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin versions up to and including 1.2.7 Description The issue arises from insufficient escaping via the pm user avatar and pm cover image parameters in the...