PatchTheCVE: surveyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-38057: An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid ahttps://patchthecve.com/cve/CVE-2023-38057.htmlhttps://patchthecve.com/cve/CVE-2023-38057.htmlWed, 17 Jun 2026 06:09:20 +0000MEDIUM 4.1: An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent. This issue affects OTCVE-2021-27852: Checkbox Survey Deserialization of Untrusted Data Vulnerabilityhttps://patchthecve.com/cve/CVE-2021-27852.htmlhttps://patchthecve.com/cve/CVE-2021-27852.htmlWed, 17 Jun 2026 03:45:31 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7.CVE-2021-21434: Survey administrator can craft a survey in such way that malicious code can be executed in the agent interfacehttps://patchthecve.com/cve/CVE-2021-21434.htmlhttps://patchthecve.com/cve/CVE-2021-21434.htmlWed, 17 Jun 2026 03:35:34 +0000LOW 3.5: Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions.