Stored XSS in Satisfaction Surveys via "Ask Reason for Dissatisfaction" option

Summary

A stored XSS (cross site scripting) vulnerability was found within the Lark satisfaction survey which an attacker could have potentially used to inject malicious javascript within the "reason for dissatification" section when selecting a poor rating after a help desk chat is completed. We thank @imran_nisar for reporting this to our team and confirming the resolution.