CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043

The SurveyJS Form Library (specifically the survey-core component) is vulnerable to Cross-Site Scripting (XSS) in versions prior to 1.10.4 . The root cause is the insufficient sanitization of the imageLink property within the question_image.ts file, which allows an attacker to execute malicious s...

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

CVE-2024-36043: Improper Neutralization of Input During Web Page Generation

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

SurveyJS Form Library security vulnerabilities

SurveyJS Form Library is a free client-side component of SurveyJS open source using the MIT license. A security vulnerability exists in SurveyJS Form Library versions prior to 1.10.4 that stems from allowing cross-site scripting attacks via the imageLink attribute...

PT-2024-26860 · Unknown · Surveyjs Form Library

Name of the Vulnerable Software and Affected Versions: SurveyJS Form Library versions prior to 1.10.4 Description: The issue allows for contentMode=youtube XSS via the imageLink property in the question image.ts file. This can lead to a potential XSS attack when the contentMode is set to youtube...

GHSA-XGJ4-2HRF-J4XG Cross-site scripting in Survey Creator

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

CVE-2024-28635

SurveyJS Survey Creator versions v.1.9.132 and before are vulnerable to a Cross Site Scripting (XSS) vulnerability. The root cause is the improper handling of the title parameter in a form, specifically identified within the string-editor.ts component. An attacker can exploit this to execute arbi...

SurveyJS Survey Creator 1.9.132 Cross Site Scripting

Details: Cross Site Scripting vulnerability in Survey JS Survey Creator v.1.9.132 and before allows an attacker to execute arbitrary code via the input field parameters of the creator survey section. ------------------------------------------ Vulnerability Type Cross Site Scripting XSS...