Lucene search
+L

4639 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•8 views

CVE-2023-6842: Improper Neutralization of Input During Web Page Generation

The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the name field label and description field label parameter in all versions up to 6.7 inclusive due to insufficient input...

4.8CVSS6.5AI score0.00313EPSS
SaveExploits0References3
hivepro
hivepro
•added 2024/01/05 8:19 a.m.•30 views

Surging JavaScript Threats Steal Your Secrets

Summary: The threat actors utilize malicious JavaScript samples, taking advantage of popular survey sites, low-quality hosting, and web chat APIs to steal sensitive information. They create chatbots registered under notable figures, like an Australian footballer, in specific campaigns...

7.3AI score
SaveExploits0
Patchstack
Patchstack
•added 2023/12/27 12:00 a.m.•34 views

WordPress Quiz And Survey Master Plugin <= 8.1.16 is vulnerable to Broken Access Control

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.16 Fixed in 8.1.17 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51507 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a01b6a13b8b9 Credits Revan Arifio Require...

5.3CVSS6.5AI score0.00313EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/12/27 12:00 a.m.•16 views

WordPress Quiz And Survey Master Plugin <= 8.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.18 Fixed in 8.1.19 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51521 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID cab7ecf5313a Credits Brandon...

5.4CVSS6.6AI score0.00197EPSS
SaveExploits0References2Affected Software1
Akamai Blog
Akamai Blog
•added 2023/12/19 2:00 p.m.•18 views

Insights from Survey of Financial Services Cyber Leaders in Asia-Pacific

...

7.3AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2023/12/14 2:00 p.m.•22 views

What We've Learned from Media Cloud Adoption Trends

Read the top takeaways from a global survey of leaders in the media and entertainment industry about their cloud adoption experiences and challenges...

7.2AI score
SaveExploits0
Securelist
Securelist
•added 2023/12/11 10:00 a.m.•57 views

Story of the year: the impact of AI on cybersecurity

In the whirlwind of technological advancements and societal transformations, the term "AI" has undoubtedly etched itself into the forefront of global discourse. Over the past twelve months, this abbreviation has resonated across innumerable headlines, business surveys and tech reports, firmly...

7.7AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2023/11/24 12:00 a.m.•12 views

Quiz And Survey Master < 8.1.16 - Cross-Site Request Forgery via 'display_results'

Description The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.1.15. This is due to missing or incorrect nonce validation on the 'displayresults' function. This makes it possible for unauthenticated attackers to submit...

6.7AI score
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/11/23 12:15 a.m.•19 views

CVE-2023-47834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master plugin = 8.1.13 versions...

5.4CVSS7.3AI score0.00385EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/23 12:15 a.m.•40 views

CVE-2023-47834

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master plugin = 8.1.13 versions...

6.5CVSS0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/22 11:16 p.m.•43 views

CVE-2023-47834 WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master plugin = 8.1.13 versions...

6.5CVSS6.7AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/22 11:16 p.m.•103 views

CVE-2023-47834

CVE-2023-47834 affects the WordPress plugin “Quiz And Survey Master” (ExpressTech Quiz And Survey Master) for versions

6.5CVSS6AI score0.00385EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/22 12:00 a.m.•23 views

Survey Maker Plugin SQLi

The vulnerability of the Survey Maker plugin of the WordPress content management system is related to the lack of protection for the SQL query structure when processing the surveysids parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS8AI score0.02341EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/22 12:00 a.m.•21 views

PT-2023-30637 · Unknown · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master plugin versions prior to 8.1.14 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For ExpressTech Quiz...

6.5CVSS6.2AI score0.00385EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/11/22 12:00 a.m.•18 views

WordPress Plugin Quiz And Survey Master Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Quiz And Survey Master -...

6.5CVSS5.9AI score0.00385EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/22 12:00 a.m.•12 views

CVE-2023-47834: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master plugin = 8.1.13 versions...

6.5CVSS6AI score0.00385EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/11/16 12:00 a.m.•23 views

WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)

Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.13 Fixed in 8.1.14 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47834 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f34de2f1d2a5 Credits emad Required privilege...

6.5CVSS6.6AI score0.00385EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2023/11/14 9:15 p.m.•24 views

CVE-2023-36007

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability...

4.1CVSS7.3AI score0.01069EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/14 9:15 p.m.•25 views

Spoofing

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability...

3.5CVSS7.1AI score0.01069EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2023/11/14 8:00 a.m.•51 views

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

...

7.6CVSS7.3AI score0.01069EPSS
SaveExploits0
Rows per page
Query Builder