CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

The CVE-2022-29710 entry describes a cross-site scripting (XSS) vulnerability in LimeSurvey, specifically in uploadConfirm.php, affecting versions 5.3.9 and earlier. The underlying issue is lack of input validation that allows an attacker to execute arbitrary web scripts or HTML via a crafted plu...