CVE-2022-46484: Ngsurvey

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.

Affected products

• Ngsurvey Ngsurvey: up to and including 2.4.28

Published 2023-08-02. Last modified 2026-06-17.