Aller au contenu
Se connecter
6.1 Moyenne

CVE-2023-2572 The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in…

Description

The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Produits et versions touchés

Produit Versions touchées Corrigé en
Survey Maker 3.4 premières → < 3.4.7 3.4.7

Autres CVE de Survey Maker

Les 2 CVE de Survey Maker →
CVE-2024-4061 The Survey Maker WordPress plugin before 4.2.9 does not sanitise and escape some of its settings, which could allow… 4.8 Moyenne
Suivre cette CVE