SurveyKing vulnerabilities
CVEs whose affected-version data names the SurveyKing package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111646Medium· 5.9SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview
SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/{attachmentId}. Attackers who know or derive time-ordered sno…
▾ Sunlitjavahuang · SurveyKingvia CVEORG
CVE-2022-25590Medium· 6.5SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.
SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cache when the user exits the application.
▾ Sunlitsurveyking · surveykingEPSS 1.3%via NVD