User Meta User Profile Builder And User Management Security Vulnerabilities and Issues — User Meta User Profile Builder And User Management CVE List

Lucene search

User-metaUser Meta User Profile Builder And User Management

2 matches found

CVE•added 2022/05/30 9:15 a.m.•71 views

CVE-2022-0376

The User Meta WordPress plugin before 2.4.3 does not sanitise and escape the Form Name, as well as Shared Field Labels before outputting them in the admin dashboard when editing a form, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disal...

4.8CVSS4.8AI score0.00267EPSS

CVE•added 2025/05/15 8:15 p.m.•17 views

CVE-2024-6708

The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the admin area, which allows Admin+ users to perform Cross-Site Scripting attacks.

4.8CVSS6.1AI score0.00046EPSS