BIT-LIMESURVEY-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

Cross site scripting

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

LimeSurvey 跨站脚本漏洞

LimeSurvey formerly known as PHPSurveyor is an open source online survey program from the Limesurvey team that supports survey program development, survey publishing, and data collection. A security vulnerability exists in LimeSurvey v5.3.9 and earlier versions, which stems from cross-site...

CVE-2022-29710

A cross-site scripting XSS vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin...

CVE-2022-29710

The CVE-2022-29710 entry describes a cross-site scripting (XSS) vulnerability in LimeSurvey, specifically in uploadConfirm.php, affecting versions 5.3.9 and earlier. The underlying issue is lack of input validation that allows an attacker to execute arbitrary web scripts or HTML via a crafted plu...

PT-2022-19793 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: LimeSurvey versions 5.3.9 and below Description: A cross-site scripting XSS issue in the uploadConfirm.php file allows attackers to execute arbitrary web scripts or HTML via a crafted plugin. This can be exploited by attackers to execute...