{
  "GSD": {
    "alias": "CVE-2023-34423",
    "id": "GSD-2023-34423"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-34423"
      ],
      "details": "Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege.",
      "id": "GSD-2023-34423",
      "modified": "2023-12-13T01:20:30.875286Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2023-34423",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Survey Maker",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "prior to 3.6.4"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "AYS Pro Plugins"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Cross-site scripting (XSS)"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://wordpress.org/plugins/survey-maker/",
            "refsource": "MISC",
            "url": "https://wordpress.org/plugins/survey-maker/"
          },
          {
            "name": "https://jvn.jp/en/jp/JVN51098626/",
            "refsource": "MISC",
            "url": "https://jvn.jp/en/jp/JVN51098626/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product with the administrative privilege."
          },
          {
            "lang": "es",
            "value": "Survey Maker anterior a 3.6.4 contiene una vulnerabilidad de Cross Site Scripting almacenadas. Si se explota esta vulnerabilidad, se puede ejecutar un script arbitrario en el navegador web del usuario que inicia sesi\u00f3n en el sitio web utilizando el producto con privilegios administrativos."
          }
        ],
        "id": "CVE-2023-34423",
        "lastModified": "2024-04-03T12:38:04.840",
        "metrics": {},
        "published": "2024-04-03T08:15:48.990",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://jvn.jp/en/jp/JVN51098626/"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://wordpress.org/plugins/survey-maker/"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}