Lucene search
+L

4082 matches found

NVD
NVD
added 2024/04/11 1:25 a.m.28 views

CVE-2024-27966

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 8.2.2...

5.9CVSS5.7AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/11 12:00 a.m.8 views

WordPress Plugin Quiz And Survey Master 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Quiz And Survey Master A cross-sit...

5.9CVSS7.5AI score0.00338EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 8:15 a.m.15 views

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

5.3CVSS5.8AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2024/04/03 8:15 a.m.19 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6.1CVSS5.7AI score0.00356EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 8:15 a.m.34 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6.1CVSS5.8AI score0.00356EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/03 7:15 a.m.52 views

CVE-2024-24506

Cross Site Scripting XSS vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function...

6.1CVSS6.2AI score0.00677EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2024/04/03 7:10 a.m.21 views

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

5.2AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 7:10 a.m.80 views

CVE-2023-35764

CVE-2023-35764 relates to the Survey Maker WordPress plugin. The connected WPVulnDB entry identifies an IP address spoofing issue in Survey Maker versions up to 4.1.0 (and related Wordfence/WPScan detail describes IP spoofing as caused by insufficient data authenticity verification). The CVE desc...

5.3CVSS6.8AI score0.00263EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/04/03 7:10 a.m.47 views

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

6.8AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 7:09 a.m.81 views

CVE-2023-34423

CVE-2023-34423 (Survey Maker) has a stored XSS in versions prior to 3.6.4 that can execute arbitrary scripts in the browser of the admin user logging in to the site. Affected: Survey Maker WordPress plugin

6.1CVSS6AI score0.00356EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/03 7:09 a.m.24 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6.1AI score0.00356EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/03 7:09 a.m.37 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6AI score0.00356EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 12:00 a.m.117 views

CVE-2024-24506

LimeSurvey Community Edition 5.3.32+220817 contains a Cross-Site Scripting (XSS) vulnerability in the General Setting function via the Administrator email address parameter. Exploitation can allow remote execution of scripts in a victim’s browser, potentially enabling session/cookie theft or cred...

6.1CVSS6.5AI score0.00677EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
added 2024/04/03 12:00 a.m.84 views

CVE-2024-24506

Cross Site Scripting XSS vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function...

6.4AI score0.00677EPSS
SaveExploits4References2
Vulnrichment
Vulnrichment
added 2024/04/03 12:00 a.m.18 views

CVE-2024-24506

Cross Site Scripting XSS vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function...

6.5AI score0.00677EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.11 views

WordPress plugin Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS5.9AI score0.00356EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.12 views

WordPress plugin Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS5.5AI score0.00263EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/03 12:00 a.m.11 views

CVE-2024-24506

Cross Site Scripting XSS vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function...

6.1CVSS6.3AI score
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2024/04/01 12:00 a.m.19 views

Survey Maker < 4.0.7 - Reflected Cross-Site Scripting

Description The Survey Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

7.1CVSS6.3AI score0.00385EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/28 12:00 a.m.16 views

PT-2024-12510 · Unknown · Survey Maker

Name of the Vulnerable Software and Affected Versions: Survey Maker versions prior to 3.6.4 Description: The issue is related to insufficient verification of data authenticity, allowing a remote unauthenticated attacker to spoof an IP address when posting. Recommendations: For versions prior to...

5.3CVSS6.9AI score0.00263EPSS
SaveExploits0References8
Rows per page
Query Builder