CVE-2014-5018

2022-10-0316:20:42

mitre

www.cve.org

cve-2014-5018

remote attackers

cross-site scripting

gbk charset

survey resume

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting (XSS) attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume.