The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.

Published Sep 17, 2019 · Updated Aug 6, 2024 · Assigned by mitre