CVE-2022-4831: Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode
The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Custom User Profile Fields for User Registration WordPress plugin?
The vulnerability ID for the Custom User Profile Fields for User Registration WordPress plugin is CVE-2022-4831.
What is the severity of CVE-2022-4831?
The severity of CVE-2022-4831 is medium with a CVSS score of 5.4.
What does the Custom User Profile Fields for User Registration WordPress plugin vulnerability allow?
The vulnerability allows users with a role as low as contributor to perform Stored Cross-Site Scripting (XSS) attacks.
How can an attacker exploit CVE-2022-4831?
An attacker can exploit CVE-2022-4831 by injecting malicious scripts into the page, which will be executed when the affected plugin outputs certain shortcode attributes.
How do I fix the Custom User Profile Fields for User Registration WordPress plugin vulnerability?
To fix the vulnerability, update the Custom User Profile Fields for User Registration WordPress plugin to version 1.8.1 or later.