Skip to content
OpenAdvisories

Vendor

devsoftbaltic

10 known vulnerabilities.

Products

SurveyJS: Drag & Drop Form Builder 7 SurveyJS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-2440

    SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting

    The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions. This is due to insufficient input sanitization and output escaping. The public survey page exposes the no…

    devsoftbaltic SurveyJS: Drag & Drop Form Builder Web / CMS
  • High 8.8
    CVE-2024-12544

    SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile

    The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile cl…

    devsoftbaltic SurveyJS: Drag & Drop Form Builder Web / CMS