CVE-2025-8896 | User Profile Builder Plugin up to 3.14.3 on WordPress GDPR Communication Preferences gdpr_communication_preferences cross site scripting

A vulnerability, which was classified as problematic, was found in User Profile Builder Plugin up to 3.14.3 on WordPress. Affected is the function gdpr_communication_preferences of the component GDPR Communication Preferences Module. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2025-8896. It is possible to launch the attack remotely. There is no exploit available.