CVE-2024-35049緊急 9.1SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590.
CVE-2024-35048中 4.3An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.
CVE-2022-25590中 6.5SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data us…