Skip to content
Threat Feed
Subscribe

Product

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.15.7)

1 brief RSS
high advisory

Stored Cross-Site Scripting in User Profile Builder Plugin for WordPress

The User Profile Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient input sanitization, allowing unauthenticated attackers to execute arbitrary scripts via the 'Biographical Info' field.

User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor wordpress xss web-security
2t 1c