CVE-2019-14747

DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter...

CVE-2019-14747: Improper Neutralization of Input During Web Page Generation

DWSurvey through 2019-07-22 has stored XSS via the design/my-survey-design!copySurvey.action surveyName parameter...

PT-2019-13814

Name of the Vulnerable Software and Affected Versions DWSurvey versions prior to 2019-07-22 Description The issue allows for stored XSS via the surveyName parameter in the "design/my-survey-design!copySurvey.action" endpoint. Recommendations For versions prior to 2019-07-22, avoid using the...