4 matches found
CVE-2022-29710
A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...
6.1CVSS0.00796EPSS
SaveExploits0References1
CVE-2022-29710
A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...
6AI score0.00796EPSS
SaveExploits0References1
CVE-2022-29710
The CVE-2022-29710 entry describes a cross-site scripting (XSS) vulnerability in LimeSurvey, specifically in uploadConfirm.php, affecting versions 5.3.9 and earlier. The underlying issue is lack of input validation that allows an attacker to execute arbitrary web scripts or HTML via a crafted plu...
6.1CVSS5.8AI score0.00796EPSS
SaveExploits0References1Affected Software1
20