Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/08/14 5:04 p.m.34 views

CVE-2026-63361 LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML editor popup

LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are passed through a blacklist sanitizer and then rendered without context-appropriate output encoding...

8.5CVSS0.00305EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/14 5:04 p.m.22 views

CVE-2026-63361 LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML editor popup

LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are passed through a blacklist sanitizer and then rendered without context-appropriate output encoding...

8.5CVSS5AI score
SaveExploits0References5
Rows per page
Query Builder