CVE-2024-6708

The User Profile Builder WordPress plugin, in versions prior to 3.12.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the plugin's failure to properly sanitise and escape certain parameters before displaying their content within the admin area . This flaw allows users wi...