3 matches found
Cross-Site Scripting(XSS)
LimeSurvey is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to a lack of sanitization in generaloptionspanel.php. This could allow an attacker to escalate privileges by injecting malicious scripts...
5.4CVSS6.9AI score0.00679EPSS
SaveExploits1References4Affected Software1
Cross site scripting
Cross Site Scripting XSS vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate privileges via a crafted script to the generaloptionspanel.php component...
4.9CVSS6.3AI score0.00679EPSS
SaveExploits1References4Affected Software1
20