Lucene search
PRIOn knowledge basePRION:CVE-2020-25798HistoryNov 17, 2020 - 3:15 p.m.
Cross site scripting
2020-11-1715:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
24.8%
A stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users with correct permissions to inject arbitrary web script or HTML via parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page. When the survey attribute being edited or viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| limesurvey | le | 3.21.1 |
Related
cve
cve
CVE-2020-25798
2020-11-17 15:15:12
nvd
nvd
CVE-2020-25798
2020-11-17 15:15:12
veracode
veracode
Cross-site Scripting (XSS)
2020-11-18 01:13:04
osv
osv
BIT-limesurvey-2020-25798
2024-03-06 10:56:40
CVE-2020-25798
2020-11-17 15:15:12
cvelist
cvelist
CVE-2020-25798
2020-11-17 14:21:20
openvas
openvas
LimeSurvey < 3.21.2 Multiple XSS Vulnerabilities
2021-01-15 00:00:00