4 matches found
CVE-2024-4061
The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4061 Survey Maker < 4.2.9 - Admin+ Stored XSS via Plugin Settings
The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-4061
CVE-2024-4061 affects the Survey Maker WordPress plugin prior to 4.2.9. It fails to sanitize/escape certain plugin settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. A fix is available in 4.2.9+; upgrading is recommended. If upgrading isn...
CVE-2024-4061 Survey Maker < 4.2.9 - Admin+ Stored XSS via Plugin Settings
The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...