← CVE Intelligence

CVE-2024-6708

Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scripting PUBLISHED

Description (CNA)

The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the admin area, which allows Admin+ users to perform Cross-Site Scripting attacks.

Affected (CNA)

Vendor / productVersions
Unknown / User Profile Builderaffected 0 before 3.12.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.