SurveyJS: Drag & Drop Form Builder vulnerabilities

2 known vulnerabilities in SurveyJS: Drag & Drop Form Builder from Devsoftbaltic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  SurveyJS: Drag & Drop Form Builder: Improper Neutralization of Input During Web Page Generation

  CVE-2026-2440Mar 21, 2026Devsoftbaltic

  The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions. This is due to insufficient input sanitization and output escaping. The public survey page exposes the non

• 8.8 High severity

  SurveyJS: Drag & Drop Form Builder: Missing Authorization

  CVE-2024-12544Mar 1, 2025Devsoftbaltic

  The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile cla