CVE-2023-2572 — Vulnerability intelligence

ays-pro — survey maker

Published: 2023-06-05T14:15:10.423

CVSS

6.1

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Sources

• CVE-2023-2572
• Exploit, Third Party Advisory