GHSA-xgj4-2hrf-j4xg
Cross-site scripting in Survey Creator
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | survey-creator | < 1.9.133 | 1.9.133 |
Details
As written in the advisory (Markdown source, shown as plain text).
Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title parameter in form.
References
External links from the advisory. They lead to third-party sites.