EUVD-2022-34050

Malicious code in bioql PyPI...

Survey Sparrow Enterprise Survey Software 2022 Cross Site Scripting

Exploit Title: Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting XSS Date: May 11 2022 Exploit Author: Pankaj Kumar Thakur Vendor Homepage: https://surveysparrow.com/ Software Link: https://surveysparrow.com/enterprise-survey-software/ Version: 2022 Tested on: Windows C...

CVE-2022-29727

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting XSS vulnerability in the Signup parameter...

CVE-2022-29728

Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting XSS vulnerability in the test parameter...

CVE-2022-29727

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting XSS vulnerability in the Signup parameter...

CVE-2022-29728

Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting XSS vulnerability in the test parameter...

Cross site scripting

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting XSS vulnerability in the Signup parameter...

CVE-2022-29728

Survey Sparrow Enterprise Survey Software 2022 contains a reflected XSS vulnerability in the test parameter. The issue stems from insufficient input validation/filtering and output encoding of user-supplied data, allowing injected JavaScript to be reflected back to the client. Impact is client-si...

CVE-2022-29727

CVE-2022-29727 affects Survey Sparrow Enterprise Survey Software 2022. Vulnerable component: the Signup parameter, due to missing input validation, enabling stored XSS. Documented impact: client-side JavaScript execution. CVSS scores: v3.1 base 5.4 (MEDIUM), vector NETWORK/AV:N/AC:L/PR:L/UI:R/S:C...

CVE-2022-29728: Improper Neutralization of Input During Web Page Generation

Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting XSS vulnerability in the test parameter...

CVE-2022-29727: Improper Neutralization of Input During Web Page Generation

Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting XSS vulnerability in the Signup parameter...