PT-2018-15308

Name of the Vulnerable Software and Affected Versions LimeSurvey versions prior to 3.15.6 Description The issue is related to a Cross-site scripting XSS vulnerability in the Survey Resource zip upload feature, which can lead to Javascript code execution against LimeSurvey administrators...

CVE-2018-20322: Improper Neutralization of Input During Web Page Generation

LimeSurvey version 3.15.5 contains a Cross-site scripting XSS vulnerability in Survey Resource zip upload, resulting in Javascript code execution against LimeSurvey administrators. Fixed in version 3.15.6...