Vulnerabilities > AYS PRO > Survey Maker > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-05 | CVE-2023-2572 | Unspecified vulnerability in Ays-Pro Survey Maker The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin | 6.1 |
| 2023-01-03 | CVE-2023-0038 | Unspecified vulnerability in Ays-Pro Survey Maker The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via survey answers in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. | 6.1 |
| 2022-02-21 | CVE-2021-26256 | Cross-site Scripting vulnerability in Ays-Pro Survey Maker Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6). | 6.1 |