CVE-2023-34423: XSS
Published Apr 3, 2024
·Updated
Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.
Affected Software
2 affected components
Survey Maker Survey Maker<3.6.4
ays-pro Survey Maker Wordpress<3.6.4
Event History
Apr 3, 2024
CVE Published
via MITRE·07:09 AM
Data Sourced
via MITRE·07:09 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-34423?
CVE-2023-34423 is classified as a medium-severity stored cross-site scripting vulnerability.
2
How do I fix CVE-2023-34423?
To fix CVE-2023-34423, upgrade Survey Maker to version 3.6.4 or later.
3
What type of vulnerability is CVE-2023-34423?
CVE-2023-34423 is a stored cross-site scripting vulnerability found in Survey Maker.
4
Who is affected by CVE-2023-34423?
Administrators using Survey Maker versions prior to 3.6.4 are affected by CVE-2023-34423.
5
What could happen if CVE-2023-34423 is exploited?
If exploited, CVE-2023-34423 could allow an attacker to execute arbitrary scripts in the web browser of a logged-in administrator.