PT-2022-9461

Name of the Vulnerable Software and Affected Versions The Perfect Survey WordPress plugin versions 1.5.2 and earlier Description The issue arises from the lack of validation and escaping of the X-Forwarded-For header value before it is outputted in the statistic page. This occurs when the Anonymi...

PT-2022-9458

Name of the Vulnerable Software and Affected Versions The Perfect Survey WordPress plugin versions prior to 1.5.2 Description The issue allows unauthenticated users to perform SQL injection due to the lack of validation and escaping of the question id GET parameter in the "get question" AJAX...