Wp User Frontend Pro
Monthly
Unauthenticated cross-site scripting in WP User Frontend Pro 4.2.13 and earlier allows remote attackers to inject arbitrary script into a victim's browser via a crafted link, requiring the victim to click a link or visit an attacker-controlled page. The vulnerability is unauthenticated (PR:N) but requires user interaction (UI:R), and impact is confined to the browser context of the interacting user. No public exploit code or active exploitation is identified at time of analysis; no EPSS or KEV data was provided.
Unauthenticated cross-site scripting in WP User Frontend Pro 4.2.13 and earlier allows remote attackers to inject arbitrary script into a victim's browser via a crafted link, requiring the victim to click a link or visit an attacker-controlled page. The vulnerability is unauthenticated (PR:N) but requires user interaction (UI:R), and impact is confined to the browser context of the interacting user. No public exploit code or active exploitation is identified at time of analysis; no EPSS or KEV data was provided.