WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)

CVE-2024-22142

What is CVE-2024-22142?

A reflected cross-site scripting (XSS) vulnerability exists in Cozmoslabs Profile Builder Pro, specifically affecting versions from n/a to 3.10.0. This vulnerability arises from improper neutralization of user input during web page generation, allowing an attacker to inject malicious scripts. When a crafted link is clicked by a user, the malicious script can execute in the context of the user's browser, potentially leading to unauthorized actions and data exposure. It is crucial for users of Profile Builder Pro to review their configurations and apply recommended patches or updates to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References