Advisories · Technology
devsoftbaltic SurveyJS: Drag & Drop Form Builder.
Every CVE that names devsoftbaltic SurveyJS: Drag & Drop Form Builder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Cross-site scripting (XSS)
- CVSS 8.8 High
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via…
- devsoftbaltic SurveyJS: Drag & Drop Form Builder
- Broken access control