mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-02 00:15:14 +02:00
750 B
750 B
CVE-2021-24765
Description
The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before outputting it in the statistic page when the Anonymize IP setting of a survey is turned off, leading to a Stored Cross-Site Scripting issue
POC
Reference
Github
No PoCs found on GitHub currently.