Lucene search
+L

4 matches found

NVD
NVD
•added 2020/08/05 4:15 p.m.•48 views

CVE-2020-16192

LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters...

6.1CVSS6.2AI score0.00665EPSS
SaveExploits0References1
Prion
Prion
•added 2020/08/05 4:15 p.m.•25 views

Cross site scripting

LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters...

4.3CVSS6AI score0.00665EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/08/05 3:05 p.m.•61 views

CVE-2020-16192

LimeSurvey 4.3.2 is affected by a reflected XSS due to LSBaseController.php not validating parameters. Root cause: lack of input validation in the LSBaseController. Impact: cross-site scripting reflected in web context. Remediation: implement proper parameter validation in LSBaseController.php an...

6.1CVSS6AI score0.00665EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/05 12:00 a.m.•6 views

CVE-2020-16192: Improper Neutralization of Input During Web Page Generation

LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters...

6.1CVSS5.7AI score0.00665EPSS
SaveExploits0References2
Rows per page
Query Builder