漏洞描述
The plugin does not sanitise and escape some parameters from a sample file before outputting them back in the page, leading to Reflected Cross-Site Scripting
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/4b128c9c-366e-46af-9dd2-e3a9624e3a53↗wordpress.orghttps://wordpress.org/plugins/crm-perks-forms/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2022-38467↗patchstack.comhttps://patchstack.com/database/vulnerability/crm-perks-forms/wordpress-crm-perks-forms-plugin-1-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve↗github.comhttps://github.com/ARPSyndicate/cvemon↗