6.5
Medium
CVE-2026-96338 Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions
Description
Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Profile Builder 4.0 | earliest → 4.0.2 | No fix stated |
Other CVEs of Profile Builder
The 8 CVEs of Profile Builder →
CVE-2026-54855
Unauthenticated Cross Site Scripting (XSS) in Profile Builder <= 4.0.5 versions
7.1
High
CVE-2026-54854
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions
6.3
Medium
CVE-2026-54853
Missing Authorization vulnerability in Cozmoslabs Profile Builder profile-builder allows Exploiting Incorrectly…
5.3
Medium
CVE-2026-112242
Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege…
8.8
High