CVE-2016-10990

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header...

CVE-2016-10990

CVE-2016-10990 affects the WordPress wp-cerber plugin prior to version 2.7, exposing a stored/ reflected XSS via the X-Forwarded-For HTTP header. The vulnerability is described across multiple sources (Red Hat, NVD, CVE listings) as an XSS in WP Cerber due to handling of the X-Forwarded-For heade...