Lucene search
+L

4015 matches found

Vulnrichment
Vulnrichment
added 2024/03/27 7:10 a.m.27 views

CVE-2024-29918 WordPress Survey Maker plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Survey Maker team Survey Maker allows Reflected XSS.This issue affects Survey Maker: from n/a through 4.0.6...

7.1CVSS7AI score0.00385EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/27 5:48 a.m.8 views

Multiple vulnerabilities in WordPress Plugin "Survey Maker"

Overview WordPress Plugin "Survey Maker" provided by AYS Pro Plugins contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2023-34423 Insufficient verification of data authenticity CWE-345 - CVE-2023-35764 Atsuya Yoda of GMO Cybersecurity by Ierae, Inc. reported...

6.1CVSS6.3AI score0.00356EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.11 views

PT-2024-20426

Name of the Vulnerable Software and Affected Versions Lime Survey Community Edition version v.5.3.32+220817 Description A Cross Site Scripting XSS issue allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function. This enables...

6.1CVSS6.8AI score0.00677EPSS
SaveExploits4References10
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/27 12:0 a.m.43 views

JVN#51098626: Multiple vulnerabilities in WordPress Plugin "Survey Maker"

WordPress Plugin "Survey Maker" provided by AYS Pro Plugins contains multiple vulnerabilities listed below. Stored cross-site scripting CWE-79 - CVE-2023-34423 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

6.1CVSS5.8AI score0.00356EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.8 views

WordPress Plugin Survey Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
added 2024/03/26 9:15 p.m.21 views

CVE-2023-28787

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.4...

9.3CVSS9.7AI score0.0196EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/26 8:24 p.m.30 views

CVE-2023-28787 WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.4...

9.3CVSS9.8AI score0.0196EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/26 8:24 p.m.73 views

CVE-2023-28787

CVE-2023-28787 affects the WordPress plugin Quiz And Survey Master (ExpressTech)

9.3CVSS8.9AI score0.0196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/26 8:24 p.m.17 views

CVE-2023-28787 WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.4...

9.3CVSS7.9AI score0.0196EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/26 12:0 a.m.8 views

WordPress Plugin Quiz And Survey Master SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A SQL injection vulnerability exists in the WordPress...

9.3CVSS9.2AI score0.0196EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/03/25 12:0 a.m.13 views

WordPress Survey Maker Plugin <= 4.0.6 is vulnerable to Cross Site Scripting (XSS)

Software Survey Maker Type Plugin Vulnerable versions = 4.0.6 Fixed in 4.0.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29918 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d250068b93d6 Credits Dimas Maulana Required privilege...

7.1CVSS6.8AI score0.00385EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/03/21 3:30 p.m.29 views

CVE-2024-27966 WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 8.2.2...

5.9CVSS5.9AI score0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/21 3:30 p.m.11 views

CVE-2024-27966 WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 8.2.2...

5.9CVSS6.7AI score0.00338EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/21 6:33 a.m.20 views

GHSA-XGJ4-2HRF-J4XG Cross-site scripting in Survey Creator

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.1AI score0.00508EPSS
SaveExploits2References4
Github Security Blog
Github Security Blog
added 2024/03/21 6:33 a.m.20 views

Cross-site scripting in Survey Creator

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.2AI score0.00508EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2024/03/21 4:15 a.m.14 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS5.9AI score0.00508EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/03/21 12:0 a.m.5 views

Survey Creator Library 跨站脚本漏洞

Survey Creator Library is SurveyJS open source a GUI-based no-code form generator library . A cross-site scripting vulnerability exists in Survey Creator Library v.1.9.132 and earlier versions that could allow an attacker to execute arbitrary code and obtain sensitive information via the title...

6.1CVSS6.3AI score0.00508EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2024/03/21 12:0 a.m.8 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.2AI score0.00508EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2024/03/21 12:0 a.m.24 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1AI score0.00508EPSS
SaveExploits2References2
CVE
CVE
added 2024/03/21 12:0 a.m.53 views

CVE-2024-28635

CVE-2024-28635 describes a Cross-Site Scripting (XSS) vulnerability in SurveyJS Survey Creator, version 1.9.132 and earlier, caused by improper handling of the title parameter in a form. The issue allows an attacker to execute arbitrary code and potentially access sensitive information via the fo...

6.1CVSS6.1AI score0.00508EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder