Cross site scripting

2013-02-1220:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379-20111116, when viewing survey results, allows remote attackers to inject arbitrary web script or HTML via unknown parameters.

CPENameOperatorVersion
limesurveyeq1.80.0
limesurveyeq1.72
limesurveyeq1.85
limesurveyeq1.53.0
limesurveyeq<= 1.91
limesurveyeq1.52
limesurveyeq1.87.0
limesurveyeq1.86
limesurveyeq1.90.0
limesurveyeq1.81.0

Name	Operator	Version
limesurvey	eq	1.80.0
limesurvey	eq	1.72
limesurvey	eq	1.85
limesurvey	eq	1.53.0
limesurvey	eq	<= 1.91
limesurvey	eq	1.52
limesurvey	eq	1.87.0
limesurvey	eq	1.86
limesurvey	eq	1.90.0
limesurvey	eq	1.81.0