CVE-2022-0884 Profile Builder < 3.6.8 - Admin+ Stored Cross-Site Scripting

What is CVE-2022-0884?

CVE-2022-0884 is a medium-severity cross-site scripting vulnerability in Unknown Profile Builder – User Profile & User Registration Forms, published on 4 Apr 2022. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.

Official description

The Profile Builder WordPress plugin before 3.6.8 does not sanitise and escape Form Fields titles and description, which could allow high privilege user such as admin to perform Criss-Site Scripting attacks even when unfiltered_html is disallowed

Weakness: CWE-79

Which versions are affected by CVE-2022-0884?

It affects 1 product.

Products include Cozmoslabs Profile Builder.

How do I fix CVE-2022-0884?

No fix has been published for CVE-2022-0884 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2022-0884 being exploited?

There is no known exploitation of CVE-2022-0884 in the wild and no public exploit code.

Other vulnerabilities in Unknown Profile Builder – User Profile & User Registration Forms

• CVE-2024-6695 profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation Critical 9.8
• CVE-2023-2297 Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism Critical 9.8
• CVE-2021-24527 Profile Builder < 3.4.9 - Admin Access via Password Reset Critical 9.8
• CVE-2024-6366 User Profile Builder < 3.11.8 - Unauthenticated Media Upload Critical 9.1
• CVE-2024-22140 WordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF) High 8.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-p59x-65gx-jx5x.