CVE-2025-13873 — The feature to import a survey is prone to stored Cross-Site Script attacks
Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, wh…
Published: 2025-12-02 · CVSS: 4.8 · CVSS 4.0
Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which executes in the browsing context of any visitor accessing the compromised survey.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7