38 matches found
CVE-2025-39471
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...
CVE-2025-39469
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...
CVE-2025-39469 WordPress Modal Survey plugin <= 2.0.2.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pantherius Modal Survey allows Reflected XSS.This issue affects Modal Survey: from n/a through 2.0.2.0.1...
CVE-2025-39469 WordPress Modal Survey plugin <= 2.0.2.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...
CVE-2025-39469
CVE-2025-39469 concerns the WordPress plugin Modal Survey (versions n/a through 2.0.2.0.1). The issue is an improper neutralization of input during web page generation, resulting in a reflected XSS vulnerability. The available documents identify the vulnerability type and affected version range b...
CVE-2025-39471 WordPress Modal Survey plugin <= 2.0.2.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...
CVE-2025-39471 WordPress Modal Survey plugin <= 2.0.2.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in pantherius Modal Survey modal-survey.This issue affects Modal Survey: from n/a through = 2.0.2.0.1...
CVE-2025-39471
CVE-2025-39471 applies to WordPress Modal Survey (versions through 2.0.2.0.1). The issue is an SQL Injection due to improper neutralization of special elements in SQL commands, enabling potential database manipulation. CVSS v3.1 base score 9.3 (CRITICAL) with network attack vector, no user intera...
PT-2025-17255 · Unknown · Pantherius Modal Survey
Name of the Vulnerable Software and Affected Versions: Pantherius Modal Survey versions through 2.0.2.0.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...
WordPress plugin Modal Survey SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
PT-2025-17253 · Unknown · Pantherius Modal Survey
Name of the Vulnerable Software and Affected Versions: Pantherius Modal Survey versions n/a through 2.0.2.0.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential...
WordPress plugin Modal Survey 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
Modal Survey < 2.0.1.8.2 - Authenticated PHP Object Injection
The Unserialize function is used multiple times in the code, for example when importing custom surveys. This could allow a malicious administrator to import a crafted JSON to trigger a PHP Object Injection vulnerability "name":"Open Text Answer Sample", "id":"924478511", "options":"", "global":"0...
Modal Survey < 2.0.1.8.2 - Authenticated Reflected Cross-Site Scripting (XSS)
The plugin did not sanitise the msuid parameter from the survey participants page in the admin Dashboard, leading to a reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php?page=modalsurveyparticipants=%27%3E%3Cscript%3Ealert%28123%29%3B%3C%2Fscript%3E...
WordPress Modal Survey premium plugin <= 2.0.1.8 - Multiple vulnerabilities
Multiple vulnerabilities were found by Pagely in the WordPress Modal Survey premium plugin versions = 2.0.1.8. Solution Update the WordPress Modal Survey premium plugin to the latest available version At least 2.0.1.8.2...
Modal Survey < 2.0.1.8.2 - Authenticated Reflected Cross-Site Scripting (XSS)
The plugin did not sanitise the msuid parameter from the survey participants page in the admin Dashboard, leading to a reflected Cross-Site Scripting issue https://example.com/wp-admin/admin.php?page=modalsurveyparticipants&msuid=%27%3E%3Cscript%3Ealert%28123%29%3B%3C%2Fscript%3E...
Modal Survey < 2.0.1.8.2 - Unauthenticated Arbitrary Survey Update, Deletion and Creation
The plugin AJAX calls including unauthenticated ones did not have capabilities and CSRF checks, allowing unauthenticated users to update, delete or create arbitrary surveys. curl --url https://exmple.com/wp-admin/admin-ajax.php --data "action=ajaxsurvey&sspcmd=delete&surveyid=110251535" curl --ur...
Modal Survey < 2.0.1.8.2 - Authenticated PHP Object Injection
The Unserialize function is used multiple times in the code, for example when importing custom surveys. This could allow a malicious administrator to import a crafted JSON to trigger a PHP Object Injection vulnerability PoC "name":"Open Text Answer Sample", "id":"924478511", "options":"",...