Read the docs

Getperfectsurvey

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Getperfectsurvey records in CISA KEV

No Getperfectsurvey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Perfect Survey 4 records HIGH

Records

4 records

TI-2021-07044 CVE-2021-24762 · GHSA-mchv-2c9q-xfg9

Perfect Survey < 1.5.2 - Unauthenticated SQL Injection

Priority HIGH 84

The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQ…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.86782 Published 2022-02-01 Fixed in 1.5.2 CWE-89
TI-2021-07047 CVE-2021-24765 · GHSA-9f2f-rwp6-gw4q

Perfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 30

The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header value before outputting it in the statistic page when the Anonymize IP setting of a survey is turned off, leading…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01405 Published 2022-02-01 No fix listed CWE-79
TI-2021-07046 CVE-2021-24764 · GHSA-c6wf-r6hx-jvrc

Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filters[session_id] of single_statistics page, type and message of importexport page) before outputting them back…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-02-01 No fix listed CWE-79
Open these records in search →