Cross-site Scripting (XSS)

LimeSurvey is vulnerable to cross-site scripting XSS. An authenticated users with correct permissions is able to inject and execute malicious script via the parameter ParticipantAttributeNamesDropdown of the Attributes on the central participant database page...