CVE-2023-25992 Auth

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM Answers plugin <= 3.1.9 versions.

Affected products and versions

Product	Affected versions	Fixed in
CM Answers 3.1	earliest → 3.1.9	No fix stated

Other CVEs of CM Answers

The 3 CVEs of CM Answers →

CVE-2025-46246 Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Cross Site… 4.3 Medium CVE-2024-54267 Missing Authorization vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Exploiting Incorrectly… 4.3 Medium