Description
The Ajaxify Comments WordPress plugin before 3.2 is vulnerable to HTTP Header Injection due to insufficient input sanitization and output escaping on user-supplied data. This makes it possible for unauthenticated attackers to inject arbitrary HTTP headers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ajaxify Comments | < 3.2 | 3.2 |
References
- https://wpscan.com/vulnerability/48250628-9b81-4bef-b623-356ceca01215/ exploit vdb-entry technical-description