CVE-2024-35050: Surveyking
High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.
An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.
Affected products
- Surveyking Surveyking: version 1.3.1 only
Published 2024-05-14. Last modified 2026-06-17.