CVE-2024-35050

A security vulnerability exists in SurveyKing v1.3.1 , where an attacker can escalate privileges by reusing a session ID belonging to a user who was previously deleted by an administrator. This flaw is attributed to insufficient session expiration (CWE-613). The vulnerability allows for high impa...