CVE-2021-24764

Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting

published February 1, 2022

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back in pages/attributes in the admin dashboard, leading to Reflected Cross-Site Scripting issues

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.2th percentile
Published
2022-02-01T12:21Z
EPSS history
Timeline
  • 01 FEB 12:21Z
    Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
    cvelistv5