CVE-2022-29710

2022-05-2501:15:07

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

A cross-site scripting (XSS) vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin.

CPENameOperatorVersion
limesurveyeq2.06_plus_150619
limesurveyeq4.3.23+201026
limesurveyeq5.0.6+210625
limesurveyeq5.3.1+220301
limesurveyeq3.20.2+191119
limesurveyeq2.50_plus_160430
limesurveyeq2.00_plus_121231
limesurveyeq1.70_plus_2008-05-05
limesurveyeq3.15.1+181017
limesurveyeq2.65.4+170612

Name	Operator	Version
limesurvey	eq	2.06_plus_150619
limesurvey	eq	4.3.23+201026
limesurvey	eq	5.0.6+210625
limesurvey	eq	5.3.1+220301
limesurvey	eq	3.20.2+191119
limesurvey	eq	2.50_plus_160430
limesurvey	eq	2.00_plus_121231
limesurvey	eq	1.70_plus_2008-05-05
limesurvey	eq	3.15.1+181017
limesurvey	eq	2.65.4+170612