PT-2018-13823

Name of the Vulnerable Software and Affected Versions LimeSurvey version 3.14.7 Description A security issue has been found in LimeSurvey, where HTML Injection and Stored XSS can be executed via the surveyls title parameter to the "/index.php?r=admin/survey/sa/insert" API endpoint. Recommendation...