CVE-2024-36043

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

question_image.ts in SurveyJS Form Library before 1.10.4 allows contentMode=youtube XSS via the imageLink property.

Published 2024-05-18. Last modified 2026-06-17.