3 matches found
Cross-Site Scripting(XSS)
LimeSurvey is vulnerable to Cross-site Scripting XSS. The vulnerability is caused due to a lack of sanitization in generaloptionspanel.php. This could allow an attacker to escalate privileges by injecting malicious scripts...
CVE-2023-44796
Cross Site Scripting XSS vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate privileges via a crafted script to the generaloptionspanel.php component...
Cross site scripting
Cross Site Scripting XSS vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate privileges via a crafted script to the generaloptionspanel.php component...