5 matches found
CVE-2024-42902
An issue in the jslocalize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the jslocalize.php function...
LimeSurvey < 6.5.14 Multiple Vulnerabilities
LimeSurvey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:limesurvey:limesurvey";...
CVE-2024-42902
An issue in the jslocalize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the jslocalize.php function...
CVE-2024-42902
An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows for arbitrary code execution . Attackers can achieve this by injecting a crafted payload into the lng parameter of the function. Practical consequences include the potential for remote code execution . Remediation inv...
CVE-2024-42902
An issue in the jslocalize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the jslocalize.php function...