Lucene search
WPScanCVELIST:CVE-2021-24764HistoryFeb 01, 2022 - 12:21 p.m.
CVE-2021-24764 Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
2022-02-0112:21:24
WPScan
www.cve.org
1
wordpress
plugin
cross-site scripting
EPSS
0.001
Percentile
41.8%
The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues
Related
cve
cve
CVE-2021-24764
2022-02-01 13:15:08
nvd
nvd
CVE-2021-24764
2022-02-01 13:15:08
wpvulndb
wpvulndb
Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
2021-10-05 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
2021-10-05 00:00:00
prion
prion
Cross site scripting
2022-02-01 13:15:00