Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting Vulnerability

Exploit Title: Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting XSS Exploit Author: Pankaj Kumar Thakur Vendor Homepage: https://surveysparrow.com/ Software Link: https://surveysparrow.com/enterprise-survey-software/ Version: 2022 Tested on: Windows CVE : CVE-2022-2972...

Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)

Exploit Title: Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting XSS Date: May 11 2022 Exploit Author: Pankaj Kumar Thakur Vendor Homepage: https://surveysparrow.com/ Software Link: https://surveysparrow.com/enterprise-survey-software/ Version: 2022 Tested on: Windows C...

CVE-2022-29727

CVE-2022-29727 affects Survey Sparrow Enterprise Survey Software 2022. Vulnerable component: the Signup parameter, due to missing input validation, enabling stored XSS. Documented impact: client-side JavaScript execution. CVSS scores: v3.1 base 5.4 (MEDIUM), vector NETWORK/AV:N/AC:L/PR:L/UI:R/S:C...