Export limit exceeded: 12012 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-129154

SurveyKing 1.13.0 through 1.13.2 Stored XSS via Response Survey Snapshot

SurveyKing 1.13.0 through 1.13.2 contains a stored cross-site scripting vulnerability because the server accepts a respondent-supplied survey snapshot and the frontend renders its titles via innerHTML. Anonymous respondents can submit a forged snapshot embedding event handlers such as img onerror that execute in an administrator's browser session when the response is viewed.

CVSS 4.0 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
Javahuang Surveyking
Products
Surveyking Surveyking