CVE 2016-10990

The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.

See the

CVE page on Mitre.org for more details.

References