Medium · 5.3 CVE-2023-35764 EUVD-2023-39763GHSA-mfh5-9vgh-ffpg

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP…

Published Apr 3, 2024 · Updated Aug 12, 2024 · Assigned by jpcert

Vendor: AYS Pro Plugins Product: Survey Maker

Description

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting.

Affected products

Vendor	Product	Affected	Fixed
AYS Pro Plugins	Survey Maker	prior to 4.1.0	—

References

https://wordpress.org/plugins/survey-maker/
https://jvn.jp/en/jp/JVN51098626/