CVE-2024-35050高 8.8An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.
CVE-2024-35048中 4.3An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.
CVE-2022-25590中 6.5SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data us…