WordPress profilepro plugin <= 1.3 - Subscriber+ Stored Cross Site Scripting vulnerability

Subscriber+ Stored Cross Site Scripting vulnerability discovered by Vuln Seeker Cybersecurity Team in WordPress Plugin profilepro versions = 1.3...

CVE-2024-6668 profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting

The ProfilePro WordPress plugin through 1.3 does not sanitise and escape some parameters and lacks proper access controls, which could allow users with a role as low as subscriber to perform Cross-Site Scripting attacks...

CVE-2024-6668 profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting

The ProfilePro WordPress plugin through 1.3 does not sanitise and escape some parameters and lacks proper access controls, which could allow users with a role as low as subscriber to perform Cross-Site Scripting attacks...

CVE-2024-6668

The ProfilePro WordPress plugin (versions 1.3 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient parameter sanitization, lack of proper escaping, and inadequate access controls. This flaw allows users with privileges as low as subscriber to execute XSS attacks. T...