CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/02/14 4:43 a.m.•16 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

6.1CVSS5.7AI score0.0028EPSS

SaveExploits0References1

Veracode•added 2024/05/22 8:45 a.m.•17 views

Cross Site Scripting (XSS)

survey-core is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient sanitization of the imageLink property in questionimage.ts, which allows an attacker to execute malicious scripts via setting contentMode=youtube...

6.1CVSS6.6AI score0.0028EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2024/05/18 7:24 p.m.•36 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

5.6AI score0.0028EPSS

SaveExploits0References2

Vulnrichment•added 2024/05/18 7:24 p.m.•13 views

CVE-2024-36043

questionimage.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property...

5.9AI score0.0028EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by