CVE-2018-17003

Affected software: LimeSurvey 3.14.7. The vulnerability is HTML Injection and Stored XSS in the appendix, triggered via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert. Root cause: untrusted input in the appendix component allows injection of HTML/JS. Impact: stored XSS with p...

LimeSurvey 3.14.7 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: LimeSurvey 3.14.7 - HTML Injection and Stored XSS Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.limesurvey.org/ Software Link : https://github.com/LimeSurvey/LimeSurvey Software : LimeSurvey 3.14.7 Product Version...

LimeSurvey 3.14.7 Cross Site Scripting

Exploit Title: LimeSurvey 3.14.7 - HTML Injection and Stored XSS Date: 2018-09-12 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.limesurvey.org/ Software Link : https://github.com/LimeSurvey/LimeSurvey Software : LimeSurvey 3.14.7 Product Version: 3.14.7 Vulernability Type : Command...