CVE-2021-24765
EUVD-2021-1167701.02.2022, 13:15
The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before outputting it in the statistic page when the Anonymize IP setting of a survey is turned off, leading to a Stored Cross-Site Scripting issue
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| getperfectsurvey | perfect_survey | 𝑥 < 1.5.2 |
𝑥
= Vulnerable software versions