Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:43:34 +0000 cnvd-2022-09992 https://cve.radiocsirt.org/vuln/cnvd-2022-09992 cnvd-2022-09992 https://cve.radiocsirt.org/vuln/cnvd-2022-09992 EUVD-2026-24164 https://cve.radiocsirt.org/vuln/euvd-2026-24164 EUVD-2026-24164 https://cve.radiocsirt.org/vuln/euvd-2026-24164 fkie_cve-2021-24763 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24763 <p>The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey</p> <p>The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24763 GHSA-jq43-f5f4-5hhr https://cve.radiocsirt.org/vuln/ghsa-jq43-f5f4-5hhr <p>The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey</p> <p>The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey</p> https://cve.radiocsirt.org/vuln/ghsa-jq43-f5f4-5hhr gsd-2021-24763 https://cve.radiocsirt.org/vuln/gsd-2021-24763 gsd-2021-24763 https://cve.radiocsirt.org/vuln/gsd-2021-24763