CVE-2026-65565 describes an unauthenticated Cross Site Scripting (XSS) vulnerability affecting Survey Maker software versions up to and including 5.2.3.3. The vulnerability allows attackers to execute scripts in the context of users without requiring authentication. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation could allow attackers to execute arbitrary scripts in users' browsers, potentially leading to information disclosure, session hijacking, or other client-side impacts. The vulnerability affects confidentiality, integrity, and availability to a low degree but is considered high severity due to ease of exploitation and unauthenticated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider applying web application firewalls or input validation controls to mitigate exploitation risks.