CVE-2022-48008

An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-48008

CVE-2022-48008 affects LimeSurvey, specifically the plugin manager in version v5.4.15. The vulnerability enables an attacker to upload a crafted PHP file, allowing arbitrary code execution on the server due to improper handling/validation of uploaded files in the plugin manager. The impact is con...