CVE-2023-2572

Published: 2023-06-05T14:15Z

Last Modified: 2025-01-08T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin > MITRE Terms of Use apply – see LICENSE‑MITRE.txt