Profile Extra Fields by BestWebSoft, 588989ab-fc51-4477-9b4b-ebcfdba33bd6

CVE, Research URL: 588989ab-fc51-4477-9b4b-ebcfdba33bd6
Home page URL: Security reports for Profile Extra Fields by BestWebSoft
Application: Profile Extra Fields by BestWebSoft
Published on: -
Research Description: Profile Extra Fields by BestWebSoft [profile-extra-fields] < 1.2.4 Profile Extra Fields < 1.2.4 - Reflected Cross-Site Scripting The plugin does not escape the role parameter when outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
Affected versions: max 1.2.4.
Status: vulnerable