Lucene search
+L

2475 matches found

OSV
OSV
added 2024/04/03 8:15 a.m.22 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6.1CVSS5.7AI score0.00356EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/03 7:10 a.m.22 views

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

5.2AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 7:10 a.m.81 views

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

6.8AI score0.00263EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/04/03 7:10 a.m.49 views

CVE-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting...

6.8AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/03 7:09 a.m.84 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6AI score0.00356EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/04/03 7:09 a.m.37 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6AI score0.00356EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/03 7:09 a.m.24 views

CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege...

6.1AI score0.00356EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.14 views

WordPress plugin Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS5.5AI score0.00263EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.15 views

WordPress plugin Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.1CVSS5.9AI score0.00356EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2024/04/01 12:00 a.m.19 views

Survey Maker < 4.0.7 - Reflected Cross-Site Scripting

Description The Survey Maker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

7.1CVSS6.3AI score0.00385EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/03/29 12:00 a.m.14 views

WP Poll Maker < 3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings

Description The WP Poll Maker – Best WordPress Poll Plugin for Voting Contest plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for...

5.9CVSS5.8AI score0.00359EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/28 12:00 a.m.18 views

PT-2024-12510 · Unknown · Survey Maker

Name of the Vulnerable Software and Affected Versions: Survey Maker versions prior to 3.6.4 Description: The issue is related to insufficient verification of data authenticity, allowing a remote unauthenticated attacker to spoof an IP address when posting. Recommendations: For versions prior to...

5.3CVSS6.9AI score0.00263EPSS
SaveExploits0References8
CVE
CVE
added 2024/03/28 12:00 a.m.74 views

CVE-2024-25506

ProcessMaker, Inc ProcessMaker versions prior to 4.0 are susceptible to a Cross Site Scripting (XSS) vulnerability. A remote attacker can execute arbitrary code by gaining control of the pm_sys_sys cookie. To remediate this, users should update to version 4.0 or later . As a temporary workaround,...

7AI score0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/28 12:00 a.m.30 views

CVE-2024-25506

Cross Site Scripting vulnerability in Process Maker, Inc ProcessMaker before 4.0 allows a remote attacker to run arbitrary code via control of the pmsyssys cookie...

6.9AI score0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/28 12:00 a.m.13 views

PT-2024-12480 · Unknown · Survey Maker

Name of the Vulnerable Software and Affected Versions: Survey Maker versions prior to 3.6.4 Description: The issue is a stored cross-site scripting vulnerability. If exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product wi...

6.1CVSS6.2AI score0.00356EPSS
SaveExploits0References7
NVD
NVD
added 2024/03/27 12:15 p.m.31 views

CVE-2024-29818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

5.9CVSS5.7AI score0.00359EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/27 12:15 p.m.11 views

CVE-2024-29818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

5.9CVSS5.8AI score0.00359EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/27 11:54 a.m.41 views

CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

5.9CVSS5.9AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/27 11:54 a.m.72 views

CVE-2024-29818

CVE-2024-29818 – Stored XSS in WP Poll Maker (Poll Maker & Voting Plugin) for WordPress. Root cause: Improper neutralization of input during web page generation (Cross-site Scripting). Affected: WP Poll Maker versions from n/a through 3.1. The connected Red Hat entry repeats the same description;...

5.9CVSS8.6AI score0.00359EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/27 11:54 a.m.19 views

CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

5.9CVSS7AI score0.00359EPSS
SaveExploits0References1
Rows per page
Query Builder