334 matches found
CVE-2014-10380
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...
CVE-2015-9328
The profile-builder plugin before 2.2.5 for WordPress has XSS...
Cross site scripting
The profile-builder plugin before 2.2.5 for WordPress has XSS...
CVE-2016-10911
The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...
CVE-2016-10911
The CVE references the WordPress Profile Builder plugin (before version 2.4.2) as affected. It lists multiple XSS issues affecting that plugin. Exploitation details and exact impact are not fully specified beyond XSS in the supplied documents. Remediation implied by the CVE is to upgrade to versi...
CVE-2015-9328
The profile-builder plugin before 2.2.5 for WordPress has XSS...
CVE-2015-9328
CVE-2015-9328 affects the WordPress community plugin Profile Builder (WordPress plugin) prior to version 2.2.5 . The vulnerability is a cross-site scripting (XSS) flaw in the plugin, enabling an attacker to inject and execute client-side code. Multiple sources corroborate the issue as an XSS in t...
CVE-2014-10380
CVE-2014-10380 affects the WordPress Profile Builder plugin prior to 1.1.66, with multiple XSS flaws in forms. The connected Red Hat/CVE pages and other sources reiterate the same description. No explicit exploitation details, impact scope, or remediation/version-specific fixes are provided in th...
CVE-2014-10380
The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...
WordPress Profile Builder Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Profile Builder is one of the profile release plugin . A cross-site scripting vulnerability exists in the...
WordPress Profile Builder Plugin < 2.0.3 Multiple XSS Vulnerabilities
The WordPress plugin Copyright C 2017 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2014-8492
Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...
CVE-2014-8492
The CVE-2014-8492 entry concerns multiple XSS vulnerabilities in WordPress Profile Builder plugin prior to v2.0.3. Vulnerable component: assets/misc/fallback-page.php; affected parameters: site_name, message, site_url. Root cause: improper sanitization of input leading to script/HTML injection. I...
Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)
Stored Cross-Site Scripting XSS in field minimum password length. history.pushState'', '', '/'...
Profile Builder < 2.5.8 - Authenticated Stored Cross-Site Scripting (XSS)
Stored Cross-Site Scripting XSS in field minimum password length. PoC...
WordPress Profile Builder Plugin <= 2.4.1 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Profile Builder 2.4.0 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Profile Builder WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...