AYS Pro Plugins Survey Maker vulnerabilities

2 vulnerabilities

Known vulnerabilities in AYS Pro Plugins Survey Maker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2023-34423ays pro pluginssurvey maker+2
EPSS score
0.36%
Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.5.3CVE-2023-35764ays pro pluginssurvey maker+2
EPSS score
0.26%
Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting.