SurveyJS

devsoftbaltic

Developer

2.5.2

Latest version

500

Installations

No date

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Security Contributors

Vulnerability history

0 present

5 fixed

2 Mitigation rules

Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability
<= 1.12.32
May 2, 2025
Broken Access Control vulnerability
<= 1.12.20
Apr 4, 2025
Cross Site Scripting (XSS) vulnerability
<= 1.12.20
Apr 4, 2025
Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile vulnerability
<= 1.12.17
Feb 28, 2025
Arbitrary File Upload vulnerability
<= 1.9.136
Oct 24, 2024