getperfectsurvey records

4 published records for vendor getperfectsurvey.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
65This week	CVE-2021-24762Weaponized	Perfect Survey < 1.5.2 - Unauthenticated SQL Injectiongetperfectsurvey · perfect survey · CWE-89 Pre-auth SQL injection	Critical9.8	—	86.7%	Feb 1, 2022
35Monitor	CVE-2021-24763No exploit	Perfect Survey < 1.5.2 - Unauthorised AJAX Call to Stored XSS / Survey Settings Updategetperfectsurvey · perfect survey · CWE-352 Pre-auth XSS CSRF	High8.8	—	0.6%	Feb 1, 2022
24Monitor	CVE-2021-24765No exploit	Perfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scriptinggetperfectsurvey · perfect survey · CWE-79 Pre-auth XSS	Medium6.1	—	1.4%	Feb 1, 2022
24Monitor	CVE-2021-24764No exploit	Perfect Survey < 1.5.2 - Reflected Cross-Site Scriptinggetperfectsurvey · perfect survey · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Feb 1, 2022

CVE-2021-24762
65This week
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
CriticalCVSS 9.8WeaponizedEPSS 86%
- Pre-auth
- SQL injection
getperfectsurvey · perfect surveyFeb 1, 2022
CVE-2021-24763
35Monitor
Perfect Survey < 1.5.2 - Unauthorised AJAX Call to Stored XSS / Survey Settings Update
HighCVSS 8.8No exploitEPSS 0%
getperfectsurvey · perfect surveyFeb 1, 2022
CVE-2021-24765
24Monitor
Perfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
getperfectsurvey · perfect surveyFeb 1, 2022
CVE-2021-24764
24Monitor
Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
getperfectsurvey · perfect surveyFeb 1, 2022