CVE-2021-24764
Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →