Skip to content
Sign in
6.1 Medium

CVE-2023-2572 The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in…

Description

The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Survey Maker 3.4 earliest → < 3.4.7 3.4.7

Other CVEs of Survey Maker

The 2 CVEs of Survey Maker →
CVE-2024-4061 The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow… 4.8 Medium
Track this CVE