SurveyJS

devsoftbaltic

Developer

1.12.20

Latest version

600

Installations

May 14, 2025

Last updated

WordPress Plugin

No VDP

Claim ownership

Report vulnerability

Vulnerabilities

Vulnerability history

2 present

3 fixed

2 Mitigation rules

Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability
<= 1.12.32
May 2, 2025
Broken Access Control vulnerability
<= 1.12.20
Apr 4, 2025
Cross Site Scripting (XSS) vulnerability
<= 1.12.20
Apr 4, 2025
Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile vulnerability
<= 1.12.17
Feb 28, 2025
Arbitrary File Upload vulnerability
<= 1.9.136
Oct 24, 2024