Vulnerability Description
Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ays-Pro | Survey Maker | < 3.6.4 |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN51098626/Third Party Advisory
- https://wordpress.org/plugins/survey-maker/Product
- https://jvn.jp/en/jp/JVN51098626/Third Party Advisory
- https://wordpress.org/plugins/survey-maker/Product
FAQ
What is CVE-2023-34423?
CVE-2023-34423 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging ...
How severe is CVE-2023-34423?
CVE-2023-34423 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-34423?
Check the references section above for vendor advisories and patch information. Affected products include: Ays-Pro Survey Maker.