Skip to content
OpenAdvisories

Product · javahuang

SurveyKing

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-129152

    SurveyKing 1.12.0 through 1.13.2 Authentication Bypass via saveAnswer Response Submission

    SurveyKing 1.12.0 through 1.13.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to submit survey responses because AnswerServiceImpl.saveAnswer skips login-required and survey password checks. Attackers can submit respon…

    javahuang SurveyKing
  • Medium 5.3
    CVE-2026-129154

    SurveyKing 1.13.0 through 1.13.2 contains a stored cross-site scripting vulnerability because the server accepts a resp…

    javahuang SurveyKing
  • Medium 5.9
    CVE-2026-111646

    SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

    SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/{attachmentId}. Attackers who know or derive time-ordered snowflake file ids can by…

    javahuang SurveyKing