Devsoftbaltic · weakness class

Cross-site Scripting

4 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive information via the title…CVE-2024-28635Devsoftbaltic · CVSS 6.1 · 0.5% likely
CWE-79
WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-32167devsoftbaltic · CVSS 6.5 · 0.4% likely
CWE-79
SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2025-3815devsoftbaltic · CVSS 6.4 · 0.3% likely
CWE-79
SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-2440devsoftbaltic · CVSS 7.2 · 0.3% likely
CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.