Description

I noticed, your website is very secure.

But you overlooked a flaw Store DOM XSS .

Proof of Concept

Detail:

1 .Login vs admin demo account

2 .Create new survey , insert payload in to Survey title:

  test" onclick = "alert(document.domain)"

3 . Click create ==> detect Store DOM XSS

Video Poc

https://drive.google.com/file/d/14SVKtT1L6xAWvOma99kgdTImas2DF8RE/view?usp=sharing

Impact

This security vulnerability has the potential to steal multiple users' cookies, gain unauthorized access to that user's account through stolen cookies, or redirect the user to other malicious websites...