CVE-2020-25799

2020-12-3118:15:13

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.

CPENameOperatorVersion
limesurveyeq1.91_plus_2011-05-12
limesurveyeq2.00_plus_130226
limesurveyeq1.92RC2
limesurveyeq1.91_plus_10315
limesurveyeq3.0.0-beta.3+170914
limesurveyeq2.00_plus_121209
limesurveyeq1.53_2007-11-01
limesurveyeq3.20.0+191112
limesurveyeq2.00_plus_131202
limesurveyeq3.19.3+191023

Name	Operator	Version
limesurvey	eq	1.91_plus_2011-05-12
limesurvey	eq	2.00_plus_130226
limesurvey	eq	1.92RC2
limesurvey	eq	1.91_plus_10315
limesurvey	eq	3.0.0-beta.3+170914
limesurvey	eq	2.00_plus_121209
limesurvey	eq	1.53_2007-11-01
limesurvey	eq	3.20.0+191112
limesurvey	eq	2.00_plus_131202
limesurvey	eq	3.19.3+191023