CVE-2022-46485: Ngsurvey

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details".

Affected products

• Ngsurvey Ngsurvey: up to and including 2.4.28

Published 2023-08-02. Last modified 2026-06-17.