EUVD-2019-7965

Malware in sbrugna...

CVE-2019-17660: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in admin/translate/translateheaderview.php in LimeSurvey 3.19.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the tolang parameter, as demonstrated by the index.php/admin/translate/sa/index/surveyid/336819/lang/ PATHINFO...

PT-2019-15241

Name of the Vulnerable Software and Affected Versions LimeSurvey versions 3.19.1 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the tolang parameter in the "admin/translate/translateheader view.php" file. This can be...