CVE-2020-20070

Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld parameter of the qu-multi-fillblank!answers.action file...

PT-2023-11545 · Wkeyuan · Dwsurvey

Name of the Vulnerable Software and Affected Versions: wkeyuan DWSurvey version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the qultemld parameter of the "qu-multi-fillblank!answers.action" file. Recommendations: For wkeyuan DWSurvey versio...