VULNERABILITY INTELLIGENCE

CVE-2024-28635

CVSS score6.1 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2024-03-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79

Primary references