Surveyjs

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-2440 Mar 21, 03:26 HIGH This Week

The SurveyJS WordPress plugin contains a stored cross-site scripting (XSS) vulnerability affecting all versions up to and including 2.5.3. Unauthenticated attackers can submit malicious HTML-encoded payloads through public survey forms that execute when administrators view survey results in the WordPress admin dashboard. With a CVSS score of 7.2 and no authentication required, this represents a significant risk to WordPress sites using this plugin.

WordPress XSS Surveyjs Wordpress Plugin

NVD

CVSS 3.1

7.2

EPSS

0.1%

CVE-2026-2440

EPSS 0% CVSS 7.2

HIGH This Week

The SurveyJS WordPress plugin contains a stored cross-site scripting (XSS) vulnerability affecting all versions up to and including 2.5.3. Unauthenticated attackers can submit malicious HTML-encoded payloads through public survey forms that execute when administrators view survey results in the WordPress admin dashboard. With a CVSS score of 7.2 and no authentication required, this represents a significant risk to WordPress sites using this plugin.

WordPress XSS Surveyjs +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy