Data Illusion Zumbrunn CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Data Illusion Zumbrunn CVE published 2026-01-07

CVE-2025-15479

A stored cross-site scripting (XSS) vulnerability exists in Data Illusion Zumbrunn NGSurvey Enterprise Edition 3.6.4. Authenticated remote users with survey creation or edit privileges can execute arbitrary JavaScript in other users' browsers via crafted survey content. This vulnerability affects survey content and administration functionality on Windows and Linux servers. System administrators and securi [truncated]