CVE-2023-34423

2024-04-0307:09:42

jpcert

www.cve.org

cross-site scripting

survey maker

administrative privilege

AI Score

Confidence

High

EPSS

Percentile

9.0%

JSON

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.

CNA Affected

[
  {
    "vendor": "AYS Pro Plugins",
    "product": "Survey Maker",
    "versions": [
      {
        "version": "prior to 3.6.4",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN51098626/

wordpress.org/plugins/survey-maker/