CVE-2014-8492: Cozmoslabs Profile Builder

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the Profile Builder plugin before 2.0.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) site_name, (2) message, or (3) site_url parameter.

Affected products

• Cozmoslabs Profile Builder: up to and including 2.0.2

Published 2017-10-06. Last modified 2026-06-17.