cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2023-23490,https://securityvulnerability.io/vulnerability/CVE-2023-23490,Authenticated SQL Injection in Survey Maker Plugin by WordPress,"The Survey Maker Plugin for WordPress prior to version 3.1.2 is susceptible to an SQL injection vulnerability in the 'surveys_ids' parameter of the 'ays_surveys_export_json' action. This flaw allows authenticated users to manipulate SQL queries, potentially leading to unauthorized data access and exposure of sensitive information.",Wordpress,Survey Maker WordPress Plugin,8.8,HIGH,0.0009399999980814755,false,,false,false,false,,false,false,2023-01-20T00:00:00.000Z,0
CVE-2023-0038,https://securityvulnerability.io/vulnerability/CVE-2023-0038,Stored Cross-Site Scripting in Survey Maker WordPress Plugin,"The Survey Maker plugin for WordPress has a vulnerability that allows unauthenticated attackers to execute arbitrary web scripts via injected code in survey answers. This occurs due to a lack of sufficient input sanitization and output escaping in versions up to and including 3.1.3. When users submit quizzes, attackers can exploit this weakness, causing malicious scripts to run anytime someone accesses the submissions page, potentially compromising user data and site integrity.",Wordpress,Survey Maker – Best WordPress Survey Plugin,7.2,HIGH,0.0007399999885819852,false,,false,false,false,,false,false,2023-01-03T14:15:00.000Z,0
CVE-2021-26256,https://securityvulnerability.io/vulnerability/CVE-2021-26256,WordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability,Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6).,Wordpress,Survey Maker (WordPress Plugin),4.7,MEDIUM,0.0009800000116229057,false,,false,false,false,,false,false,2022-02-21T18:15:00.000Z,0