CVE-2017-18358

CVE-2017-18358 affects LimeSurvey before 2.72.4. The issue is a Stored XSS in the admin panel caused by mishandling an email value entered via the Continue Later (Resume later) feature, which can lead to injected JavaScript in users’ browsers. Remediation cited in connected docs is to upgrade to ...