Description

I noticed, your website is very secure.

But you overlooked a flaw Store DOM XSS .

Proof of Concept

Detail:

1 .Login vs admin demo account and access Configuration

2 .Go to Survey menus ==> Survey menus entries

3 .Add new menu entry and insert payload in to GET data method

test<script>alert(document.domain)</script>

4 .Click create ==> detect XSS

Video Poc

https://drive.google.com/file/d/1VWRE5GNGJGDc6HES0tLG3PIHMRgfOIOj/view?usp=sharing

Impact

This security vulnerability has the potential to steal multiple users' cookies, gain unauthorized access to that user's account through stolen cookies, or redirect the user to other malicious websites...