PT-2023-6983 · WordPress · Survey Maker Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Survey Maker WordPress Plugin versions prior to 3.1.2 Description: The issue is related to a lack of protection against SQL query structure manipulation when handling the surveys ids parameter. This can allow a remote attacker to execute...

CVE-2023-0038

The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-0038

The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-0038 Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting

The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2023-0038

The CVE-2023-0038 entry concerns the WordPress plugin Survey Maker – Best WordPress Survey Plugin. A stored cross-site scripting (XSS) flaw exists in versions up to and including 3.1.3 due to insufficient input sanitization and output escaping in survey answers. This allows unauthenticated attack...

WordPress plugin Survey Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Survey Maker Plugin <= 3.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Survey Maker Type Plugin Vulnerable versions = 3.1.3 Fixed in 3.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0038 Patch priority High CVSS severity High 7.2 Developer Claim ownership PSID 288687756ced Credits Chloe Chamberland Require...

CVE-2023-0038: Improper Neutralization of Input During Web Page Generation

The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

PT-2023-15964 · WordPress · Survey Maker

Name of the Vulnerable Software and Affected Versions: Survey Maker – Best WordPress Survey Plugin versions up to, and including, 3.1.3 Description: The issue is related to Stored Cross-Site Scripting via survey answers due to insufficient input sanitization and output escaping. This allows...

WordPress Survey Maker plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Survey Maker plugin 2.0.6 and previous versions have a cross-site scripting vulnerability, which can be exploited by attacke...

CVE-2021-26256

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in Survey Maker WordPress plugin versions = 2.0.6...

CVE-2021-26256

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in Survey Maker WordPress plugin versions = 2.0.6...

Cross site scripting

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in Survey Maker WordPress plugin versions = 2.0.6...

CVE-2021-26256

CVE-2021-26256 affects the WordPress Survey Maker plugin (versions

CVE-2021-26256 WordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in Survey Maker WordPress plugin versions = 2.0.6...

CVE-2021-26256: Improper Neutralization of Input During Web Page Generation

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in Survey Maker WordPress plugin versions = 2.0.6...

WordPress Survey Maker 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Survey Maker plugin 2.0.6 and previous versions have a cross-site scripting vulnerability, which can be exploited by attacke...

PT-2022-9722

Name of the Vulnerable Software and Affected Versions Survey Maker WordPress plugin versions = 2.0.6 Description The issue is related to an Unauthenticated Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows attackers to inject malicious scripts into content from...

WordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien in WordPress Survey Maker plugin versions = 2.0.6. Solution Update the WordPress Survey Maker plugin to the latest available version at least 2.0.7...

CVE-2021-24459

The getresults and getitems functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the getresults DB calls, leading to SQL injection issues in the admin dashboard...