CVE-2022-26249: Surveyking Project Surveyking

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.

Affected products

• Surveyking Project Surveyking: version 0.3.0 only

Published 2022-03-24. Last modified 2026-06-17.