ProfileGrid – User Profiles, Memberships, Groups and Communities, 86d68c452f926cc98c490ab47b43d43708e80b63

CVE, Research URL: 86d68c452f926cc98c490ab47b43d43708e80b63
Home page URL: Security reports for ProfileGrid – User Profiles, Memberships, Groups and Communities
Application: ProfileGrid – User Profiles, Memberships, Groups and Communities
Published on: Nov 27, 2017
Research Description: ProfileGrid – User Profiles, Groups and Communities [profilegrid-user-profiles-groups-and-communities] < 2.6.7 WordPress ProfileGrid Plugin <= 2.6.6 - Reflected Cross Site Scripting A reflected cross-site scripting vulnerability was found in ProfileGrid plugin in 2.6.6 version. The vulnerability exists in the file /admin/partials/user-manager.php. There some of $_GET parameters are not escaped. For example: if(isset($_GET[‘search’])) echo $_GET[‘search’]; …
Affected versions: max 2.6.7.
Status: vulnerable