{"id":"CVE-2021-24448","aliases":["EUVD-2021-11360","GHSA-8j23-c7w9-jxvg"],"status":"published","title":"Profile Builder \u003c 3.4.8 - Authenticated Stored XSS","description":"The User Registration \u0026 User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00613,"percentile":0.49718,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2021-08-02T10:31:59Z","modified":"2026-06-17T03:40:02Z","products":[{"vendor":"cozmoslabs","product":"profile_builder"},{"vendor":"unknown","product":"user registration \u0026 user profile – profile builder"}],"references":[{"url":"https://wpscan.com/vulnerability/81e42812-93eb-480d-a2d2-5ba5e02dd0ba","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-24448"},{"url":"https://github.com/advisories/GHSA-8j23-c7w9-jxvg"}],"sources":{"cve":[{"id":"CVE-2021-24448","title":"Profile Builder \u003c 3.4.8 - Authenticated Stored XSS","description":"The User Registration \u0026 User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue","status":"published","published":"2021-08-02T10:31:59Z","modified":"2024-08-03T19:28:23.855Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:33:05.331617Z"}],"euvd":[{"id":"EUVD-2021-11360","description":"The User Registration \u0026 User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue","status":"published","published":"2021-08-02T10:31:59Z","modified":"2024-08-03T19:28:23Z","updated_at":"2026-11-03T03:24:57.947294Z"}],"ghsa":[{"id":"GHSA-8j23-c7w9-jxvg","title":"The User Registration \u0026 User Profile – Profile Builder WordPress plugin before 3.4.8 does not...","description":"The User Registration \u0026 User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue","status":"published","published":"2022-05-24T22:28:27Z","modified":"2024-04-11T21:16:45Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:57:08.55794Z"}],"nvd":[{"id":"CVE-2021-24448","description":"The User Registration \u0026 User Profile – Profile Builder WordPress plugin before 3.4.8 does not sanitise or escape its 'Modify default Redirect Delay timer' setting, allowing high privilege users to use JavaScript code in it, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue","status":"published","published":"2021-08-02T11:15:09.17Z","modified":"2026-06-17T03:40:02.82Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:56.185362Z"}]}}