CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

RedhatCVE•added 2025/02/14 4:43 a.m.•23 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

6.1CVSS5.7AI score0.0028EPSS

SaveExploits0References1

NVD•added 2024/05/18 8:15 p.m.•26 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

6.1CVSS5.7AI score0.0028EPSS

SaveExploits0References2

Vulnrichment•added 2024/05/18 7:24 p.m.•16 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

5.9AI score0.0028EPSS

SaveExploits0References2

CVE•added 2024/05/18 7:24 p.m.•113 views

CVE-2024-36043

The SurveyJS Form Library (specifically the survey-core component) is vulnerable to Cross-Site Scripting (XSS) in versions prior to 1.10.4 . The root cause is the insufficient sanitization of the imageLink property within the question_image.ts file, which allows an attacker to execute malicious s...

6.1CVSS5.7AI score0.0028EPSS

SaveExploits0References2

OSV•added 2024/05/18 7:24 p.m.•29 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

6.1CVSS5.8AI score

SaveExploits0References4

Cvelist•added 2024/05/18 7:24 p.m.•43 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

5.6AI score0.0028EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by