CVE-2021-24764

The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters id and filterssessionid of singlestatistics page, type and message of importexport page before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripti...

CVE-2021-24764

The CVE-2021-24764 issue affects the Perfect Survey WordPress plugin prior to version 1.5.2. The vulnerability stems from insufficient sanitisation/escaping of user-supplied input in admin pages: id and filters[session_id] on the single_statistics page, and type and message on the importexport pa...