Headline
GHSA-xgj4-2hrf-j4xg: Cross-site scripting in Survey Creator
Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form.
Cross-site scripting in Survey Creator
Moderate severity GitHub Reviewed Published Mar 21, 2024 to the GitHub Advisory Database • Updated Mar 21, 2024
Related news
SurveyJS Survey Creator 1.9.132 Cross Site Scripting
SurveyJS Survey Creator versions 1.9.132 and below suffer from both reflective and persistent cross site scripting vulnerabilities.