Lucene search

CVE-2024-8861 ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

🗓️ 26 Sep 2024 07:37:34Reported by WordfenceType

ProfileGrid WordPress plugin <= 5.9.3.2 Stored Cross-Site Scripting vulnerabilit

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-8861	26 Sep 202408:15	–	nvd
CVE	CVE-2024-8861	26 Sep 202408:15	–	cve
Cvelist	CVE-2024-8861 ProfileGrid – User Profiles, Groups and Communities <= 5.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	26 Sep 202407:34	–	cvelist
Patchstack	WordPress ProfileGrid Plugin <= 5.9.3.2 is vulnerable to Cross Site Scripting (XSS)	26 Sep 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 23, 2024 to September 29, 2024)	3 Oct 202415:47	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/admin/class-profile-magic-admin.php
plugins	www.plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/includes/class-profile-magic.php
plugins	www.plugins.trac.wordpress.org/changeset/3157510/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2d3188c2-e5b0-4d83-8c92-ae6b409c92f9
wordpress	www.wordpress.org/plugins/profilegrid-user-profiles-groups-and-communities/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Sep 2024 07:34Current

5.8Medium risk

Vulners AI Score5.8

CVSS36.4

EPSS0.001

CWE-79