Devsoftbaltic vulnerabilities
We track 3 vulnerabilities in Devsoftbaltic products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2026.
Latest Devsoftbaltic vulnerabilities
- 7.2 High severity
SurveyJS: Drag & Drop Form Builder: Improper Neutralization of Input During Web Page Generation
The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions. This is due to insufficient input sanitization and output escaping. The public survey page exposes the non
- 8.8 High severity
SurveyJS: Drag & Drop Form Builder: Missing Authorization
The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile cla
- 9.9 Critical severity
SurveyJS: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects SurveyJS: from n/a through <= 1.9.136.