CVE-2026-65565

HighCVSS 7.1

Published: 06/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Unauthenticated Cross Site Scripting (XSS) in Survey Maker versions up to 5.2.3.3.

An attacker can inject malicious script that executes in the admin's browser, potentially leading to session theft or admin panel takeover.

Update the Survey Maker plugin to the latest available version that includes the fix.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.