CVE-2023-34423

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability

Medium · published April 3, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Published
2024-04-03T07:09Z
EPSS history
Timeline
  • 03 APR 07:09Z
    Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability
    cvelistv5