Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:54 a.m.•18 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.2AI score0.00508EPSS
SaveExploits2References1
Github Security Blog
Github Security Blog
•added 2024/03/21 6:33 a.m.•27 views

Cross-site scripting in Survey Creator

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.2AI score0.00508EPSS
SaveExploits2References4Affected Software1
OSV
OSV
•added 2024/03/21 6:33 a.m.•30 views

GHSA-XGJ4-2HRF-J4XG Cross-site scripting in Survey Creator

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.1AI score0.00508EPSS
SaveExploits2References4
NVD
NVD
•added 2024/03/21 4:15 a.m.•21 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS5.9AI score0.00508EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•11 views

Survey Creator Library 跨站脚本漏洞

Survey Creator Library is SurveyJS open source a GUI-based no-code form generator library . A cross-site scripting vulnerability exists in Survey Creator Library v.1.9.132 and earlier versions that could allow an attacker to execute arbitrary code and obtain sensitive information via the title...

6.1CVSS6.3AI score0.00508EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2024/03/21 12:00 a.m.•14 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.2AI score0.00508EPSS
SaveExploits2References2
CVE
CVE
•added 2024/03/21 12:00 a.m.•65 views

CVE-2024-28635

SurveyJS Survey Creator versions v.1.9.132 and before are vulnerable to a Cross Site Scripting (XSS) vulnerability. The root cause is the improper handling of the title parameter in a form, specifically identified within the string-editor.ts component. An attacker can exploit this to execute arbi...

6.1CVSS6.1AI score0.00508EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2024/03/21 12:00 a.m.•31 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1AI score0.00508EPSS
SaveExploits2References2
OSV
OSV
•added 2024/03/21 12:00 a.m.•13 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.4AI score
SaveExploits0References4
Mend
Mend
•added 2024/03/21 12:00 a.m.•2 views

CVE-2024-28635

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS0.00508EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•6 views

CVE-2024-28635: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form...

6.1CVSS6.4AI score0.00508EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2024/03/19 12:00 a.m.•325 views

SurveyJS Survey Creator 1.9.132 Cross Site Scripting

Details: Cross Site Scripting vulnerability in Survey JS Survey Creator v.1.9.132 and before allows an attacker to execute arbitrary code via the input field parameters of the creator survey section. ------------------------------------------ Vulnerability Type Cross Site Scripting XSS...

7.4AI score0.00508EPSS
SaveExploits2
Rows per page
Query Builder