PatchTheCVE: surveykinghttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-35050: An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user thhttps://patchthecve.com/cve/CVE-2024-35050.htmlhttps://patchthecve.com/cve/CVE-2024-35050.htmlWed, 17 Jun 2026 07:34:19 +0000HIGH 8.8: An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was deleted by an Admin.CVE-2024-35049: SurveyKing v1.3.1 was discovered to keep users' sessions active after logouthttps://patchthecve.com/cve/CVE-2024-35049.htmlhttps://patchthecve.com/cve/CVE-2024-35049.htmlWed, 17 Jun 2026 07:34:19 +0000CRITICAL 9.1: SurveyKing v1.3.1 was discovered to keep users' sessions active after logout. Related to an incomplete fix for CVE-2022-25590.CVE-2024-35048: An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their phttps://patchthecve.com/cve/CVE-2024-35048.htmlhttps://patchthecve.com/cve/CVE-2024-35048.htmlWed, 17 Jun 2026 07:34:18 +0000MEDIUM 4.3: An issue in SurveyKing v1.3.1 allows attackers to execute a session replay attack after a user changes their password.