CVE-2016-10911

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...

CVE-2016-10911

The CVE references the WordPress Profile Builder plugin (before version 2.4.2) as affected. It lists multiple XSS issues affecting that plugin. Exploitation details and exact impact are not fully specified beyond XSS in the supplied documents. Remediation implied by the CVE is to upgrade to versi...

CVE-2016-10911

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...

CVE-2015-9328

The profile-builder plugin before 2.2.5 for WordPress has XSS...

CVE-2015-9328

CVE-2015-9328 affects the WordPress community plugin Profile Builder (WordPress plugin) prior to version 2.2.5 . The vulnerability is a cross-site scripting (XSS) flaw in the plugin, enabling an attacker to inject and execute client-side code. Multiple sources corroborate the issue as an XSS in t...

CVE-2014-10380

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...

CVE-2014-10380

CVE-2014-10380 affects the WordPress Profile Builder plugin prior to 1.1.66, with multiple XSS flaws in forms. The connected Red Hat/CVE pages and other sources reiterate the same description. No explicit exploitation details, impact scope, or remediation/version-specific fixes are provided in th...

CVE-2014-10380

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...

PT-2019-7707

Name of the Vulnerable Software and Affected Versions WordPress profile-builder plugin versions prior to 2.4.2 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later to resolve the issue...

PT-2019-7056

Name of the Vulnerable Software and Affected Versions profile-builder plugin versions prior to 1.1.66 for WordPress Description The issue concerns multiple XSS problems in forms within the plugin. Recommendations For versions prior to 1.1.66, update to version 1.1.66 or later to resolve the issue...

PT-2019-7287

Name of the Vulnerable Software and Affected Versions WordPress profile-builder plugin versions prior to 2.2.5 Description The issue affects the profile-builder plugin for WordPress, allowing for XSS attacks. Recommendations For versions prior to 2.2.5, update the profile-builder plugin to versio...

CVE-2014-10380: Improper Neutralization of Input During Web Page Generation

The profile-builder plugin before 1.1.66 for WordPress has multiple XSS issues in forms...

CVE-2016-10911: Improper Neutralization of Input During Web Page Generation

The profile-builder plugin before 2.4.2 for WordPress has multiple XSS issues...

CVE-2015-9328: Improper Neutralization of Input During Web Page Generation

The profile-builder plugin before 2.2.5 for WordPress has XSS...

WordPress Profile Builder Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . Profile Builder is one of the profile release plugin . A cross-site scripting vulnerability exists in the...

WordPress Profile Builder Plugin < 2.0.3 Multiple XSS Vulnerabilities

The WordPress plugin Copyright C 2017 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

CVE-2014-8492

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

CVE-2014-8492

Multiple cross-site scripting XSS vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 sitename, 2 message, or 3 siteurl parameter...

CVE-2014-8492

The CVE-2014-8492 entry concerns multiple XSS vulnerabilities in WordPress Profile Builder plugin prior to v2.0.3. Vulnerable component: assets/misc/fallback-page.php; affected parameters: site_name, message, site_url. Root cause: improper sanitization of input leading to script/HTML injection. I...