Getperfectsurvey Perfect_survey
4 CVEs affecting Getperfectsurvey Perfect_survey. Latest disclosed: 2022-02-01. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24762 | Critical | 9.8 | 2022-02-01 | The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_quest… |
CVE-2021-24763 | High | 8.8 | 2022-02-01 | The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenti… |
CVE-2021-24765 | Medium | 6.1 | 2022-02-01 | The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before outputting it in the statistic page when… |
CVE-2021-24764 | Medium | 6.1 | 2022-02-01 | The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type a… |