CVE-2021-24764 — Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of impo…
Published: 2022-02-01 · CVSS: Unscored
The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7