Filtered by vendor Surveyking Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-35050 1 Surveyking 1 Surveyking 2025-02-13 8.8 High
An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.
CVE-2024-35049 1 Surveyking 1 Surveyking 2025-02-13 9.1 Critical
SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590.
CVE-2022-25590 1 Surveyking 1 Surveyking 2024-11-21 6.5 Medium
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.