Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-36043
6.1
MEDIUMCVSS v3
Published
May 18, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
question_image.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property.
surveyjs/survey-library
GitHubSurveyJS is an open-source JavaScript form builder library that allows developers to create dynamic forms, multi-step form wizards, and survey applications. It supports React, Angular, and Vue.js (Vue 3), and can also be used in applications built with plain JavaScript.
GitHubSurveyJS is an open-source JavaScript form builder library that allows developers to create dynamic forms, multi-step form wizards, and survey applications. It supports React, Angular, and Vue.js (Vue 3), and can also be used in applications built with plain JavaScript.NVD