漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Perfect Survey < 1.5.2 - Unauthorised AJAX Call to Stored XSS / Survey Settings Update
Vulnerability Description
The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress plugin 跨站请求伪造漏洞
Vulnerability Description
WordPress plugin是WordPress开源的一个应用插件。 WordPress plugin Perfect Survey 1.5.2之前版本存在跨站请求伪造漏洞，该漏洞源于没有适当的授权，也没有在save_global_setting AJAX 动作中进行CSRF检查，允许未经认证的用户编辑调查和修改设置。
CVSS Information
N/A
Vulnerability Type
N/A