GHSA-xgj4-2hrf-j4xg
Suggest an improvement- Source
- https://github.com/advisories/GHSA-xgj4-2hrf-j4xg
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-xgj4-2hrf-j4xg/GHSA-xgj4-2hrf-j4xg.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-xgj4-2hrf-j4xg
- Aliases
- Published
- 2024-03-21T06:33:04Z
- Modified
- 2024-03-21T19:12:58.419585Z
- Summary
- Cross-site scripting in Survey Creator
- Details
-
Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form.
- Database specific
{ "github_reviewed": true, "github_reviewed_at": "2024-03-21T18:58:33Z", "nvd_published_at": "2024-03-21T04:15:09Z", "cwe_ids": [ "CWE-79" ], "severity": "MODERATE" }- References
Affected packages
npm / survey-creator
Package
- Name
- survey-creator
- View open source insights on deps.dev
- Purl
- pkg:npm/survey-creator