Survey Maker vulnerabilities

2 known vulnerabilities in Survey Maker from Ays-pro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Survey Maker: Improper Neutralization of Input During Web Page Generation

  CVE-2025-48098Oct 22, 2025Ays-pro

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8.

• 8.8 High severity

  Survey Maker WordPress Plugin: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-23490Jan 20, 2023Survey Maker WordPress PluginEPSS 2.37%

  The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' action.