CVE-2022-1051: 
WordPress vulnerability analysis and mitigation

The WPQA Builder Plugin for WordPress, versions prior to 5.2, which is used as a companion plugin for the Discy and Himer themes, contains a Cross-Site Scripting (XSS) vulnerability. The vulnerability was discovered and disclosed on March 22, 2022, and affects the profile page functionality of the plugin (CVE Mitre).

The vulnerability stems from improper sanitization and escaping of user input in specific profile fields including city, phone, and profile credentials. When these fields are output on the profile page, they are not properly sanitized, enabling Cross-Site Scripting attacks. The vulnerability has been assigned a CVSS v3.x base score indicating medium severity (WPScan).

This vulnerability allows authenticated users to inject and execute malicious JavaScript code in the context of other users' browsers who view the compromised profile page. This could lead to session hijacking, credential theft, or other client-side attacks (WPScan).

The vulnerability requires an authenticated user account (Subscriber level or higher) to exploit. An attacker can trigger the XSS by inserting malicious scripts into the unescaped profile fields, which then execute when other users view the profile page (WPScan).

The vulnerability has been patched in version 5.2 of the WPQA Builder Plugin. Users are advised to update to this version or later to mitigate the risk (WPScan).