CVE-2024-0903

CVE-2024-0903 affects the WordPress plugin “User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds.” It is a Stored XSS vulnerability in the page_submitted/link value caused by insufficient input sanitization and output escaping in all versions up to 1.0.13. Unauthen...

CVE-2024-5902

CVE-2024-5902 affects the WordPress plugin User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds. The issue is Stored Cross-Site Scripting via the name parameter in all versions up to 1.0.15, allowing unauthenticated attackers to inject scripts that run when a high-...