PT-2025-4437 · Userpro · Private Messages For Userpro

Name of the Vulnerable Software and Affected Versions: Private Messages for UserPro versions n/a through 4.10.0 Description: The issue is related to improper neutralization of input during web page generation, which allows Reflected XSS. This means that an attacker can inject malicious scripts in...