CVE-2021-42112

CVE-2021-42112 affects LimeSurvey 3.x-LTS up to 3.27.18, where the File upload question feature enables cross-site scripting in assets/scripts/modaldialog.js and assets/scripts/uploader.js. The vulnerability is described across multiple feeds and CVSS scores indicate a likely medium severity (CVS...

PT-2021-23538 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: LimeSurvey versions 3.x-LTS through 3.27.18 Description: The issue affects the "File upload question" functionality, allowing XSS in assets/scripts/modaldialog.js and assets/scripts/uploader.js. Recommendations: For LimeSurvey versions 3.x-LT...

LimeSurvey 跨站脚本漏洞

LimeSurvey formerly known as PHPSurveyor is an open source online survey program from the LimeSurvey Limesurvey team that supports survey development, survey distribution, and data collection.LimeSurvey is vulnerable to a cross-site scripting vulnerability that originates in LimeSurvey 3.x- The...