DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.

Published Aug 16, 2019 · Updated Aug 5, 2024 · Assigned by mitre