CVE-2026-65565 Ays Pro CVE debrief

Who should care

Defenders and administrators using the Survey Maker plugin should be aware of this vulnerability and take necessary actions to protect their systems. They should verify the plugin version, review official advisories, and monitor for potential exploitation attempts. Additionally, security teams and vulnerability management teams should prioritize patching or mitigating this vulnerability to prevent potential attacks.

Technical summary

CVE-2026-65565 is an unauthenticated Cross Site Scripting (XSS) vulnerability in Survey Maker plugin version 5.2.3.3 or earlier. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. Defenders should prioritize verifying the Survey Maker plugin version and applying patches or mitigations as available. The vulnerability allows attackers to inject malicious scripts into the plugin's functionality, potentially leading to unauthorized actions or data breaches.

Defensive priority

Defenders should prioritize verifying the Survey Maker plugin version and applying patches or mitigations as available.

Recommended defensive actions

• Verify the Survey Maker plugin version
• Apply patches or mitigations as available
• Monitor for potential exploitation attempts

Evidence notes

Evidence is limited; primary official records indicate an unauthenticated Cross Site Scripting (XSS) vulnerability in Survey Maker plugin version 5.2.3.3 or earlier. Defenders should verify the plugin version, review official advisories, and monitor for potential exploitation attempts. The evidence is based on CVE and NVD records, which may not provide a comprehensive view of the vulnerability's impact.

Official resources