DWSurvey version 6.14.0 contains an incorrect access control vulnerability that allows unauthorized deletion of questionnaires. By substituting the questionnaire ID with another valid ID during a delete operation, an attacker can delete questionnaires they should not have permission to remove. This vulnerability has a high severity rating with a CVSS score of 7.5.