NetSight
medium6.1

CVE-2016-10990

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.

Impact

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.

Affected products

VendorProductAffected versions
WpcerberCerber Security Antispam \& Malware Scan
before 2.7

Weakness classification

References