Wordpress Profile Builder Plugin Cross-Site Scripting Detection

The Profile Builder User Profile & User Registration Forms WordPress plugin is vulnerable to cross-site scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

PT-2022-13332

Name of the Vulnerable Software and Affected Versions The Profile Builder – User Profile & User Registration Forms WordPress plugin versions up to and including 3.6.1 Description The issue arises from insufficient escaping and sanitization of the site url parameter found in the...

CVE-2022-0653: Improper Neutralization of Input During Web Page Generation

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

CVE-2014-8492: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

PT-2017-6241

Name of the Vulnerable Software and Affected Versions Profile Builder plugin versions prior to 2.0.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via the site name, message, or site url parameters in the assets/misc/fallback-page.php file. Recommendations F...