cleantalk
Vulnerabilities and Security Researches

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor, 3d643b87-0f52-44cc-9630-4e3e59f19373

Published on
-
Research Description
User Profile Builder &#8211; Beautiful User Registration Forms, User Profiles &amp; User Role Editor [profile-builder] < 3.5.1 Profile Builder &lt; 3.5.1 - Reflected Cross-Site Scripting The plugin does not escape some generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected versions
max 3.5.1.
Status
vulnerable