CVE-2020-22607

Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the 1 name and 2 description parameters in application/controllers/admin/PermissiontemplatesController.php...

CVE-2020-22607

The CVE-2020-22607 issue is a Cross Site Scripting vulnerability in LimeSurvey (version 4.1.11+200316) exploitable via the name and description parameters in application/controllers/admin/PermissiontemplatesController.php. The root cause is reflected XSS in those inputs, leading to potential scri...