Most recent entries from all

EUVD-2026-158253

fkie_cve-2023-35764

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting.

GHSA-mfh5-9vgh-ffpg

Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting.

gsd-2023-35764

jvndb-2024-000035

WordPress Plugin "Survey Maker" provided by AYS Pro Plugins contains multiple vulnerabilities listed below. <ul><li>Stored cross-site scripting (CWE-79) - CVE-2023-34423</li> <li>Insufficient verification of data authenticity (CWE-345) - CVE-2023-35764</li></ul> Atsuya Yoda of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.