Skip to content
OpenAdvisories
Medium · 6.1 CVE-2023-34423 EUVD-2023-38500GHSA-ph95-6589-h2hv

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script m…

Published Apr 3, 2024 · Updated Nov 6, 2024 · Assigned by jpcert

Description

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.

Affected products

VendorProductAffectedFixed
AYS Pro Plugins Survey Maker prior to 3.6.4 —

References