PT-2025-43265 · Bob · Likert Survey Master

Published 2025-10-22 · Updated 2025-11-18 · CVE-2025-53426

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Bob Likert Survey Master versions through 0.8.0.1

Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Reflected Cross-site Scripting (XSS). This means an attacker could inject malicious scripts into a website, which are then executed in the browsers of users who visit the compromised page. The vulnerability exists due to insufficient input validation and sanitization. The affected component is likely involved in generating dynamic web content.

Recommendations Update Bob Likert Survey Master to a version newer than 0.8.0.1.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-53426

Affected Products

Likert Survey Master

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-53426 · Security Note
• https://twitter.com/CVEnew/status/1990786272579702863 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/likert-survey-master/vulnerability/wordpress-likert-survey-master-plugin-0-8-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/likert-survey-master/vulnerability/wordpress-likert-survey-master-plugin-0-8-0-1-cross-site-scripting-xss-vulnerability · Note
• https://patchstack.com/database/Wordpress/Plugin/likert-survey-master/vulnerability/wordpress-likert-survey-master-plugin-0-8-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Note