CVE-2022-1579

The function checkisloginpage uses headers for the IP check, which can be easily spoofed...