CVE-2026-129154

SurveyKing versions 1.13.0 through 1.13.2 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The issue arises because the server accepts a respondent-supplied survey snapshot , which the frontend subsequently renders using innerHTML . This allows anonymous respondents to submit ...