medium6.1
CVE-2024-36043
question_image.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property.
Impact
question_image.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property.
Affected products
| Product | Affected versions |
|---|---|
| SurveyJS Form Library | before 1.10.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/surveyjs/survey-library/commit/b25fbf0efd4486dc55f836240bebc2305803b96d
- https://github.com/surveyjs/survey-library/issues/8286
- https://github.com/surveyjs/survey-library/commit/b25fbf0efd4486dc55f836240bebc2305803b96d
- https://github.com/surveyjs/survey-library/issues/8286