2019-08-16 00:28:29
mitre
PUBLISHED
DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.