CVE-2024-28635

CVE-2024-28635 describes a Cross-Site Scripting (XSS) vulnerability in SurveyJS Survey Creator, version 1.9.132 and earlier, caused by improper handling of the title parameter in a form. The issue allows an attacker to execute arbitrary code and potentially access sensitive information via the fo...