Lucene search
Veracode Vulnerability DatabaseVERACODE:35720HistoryMay 26, 2022 - 9:45 a.m.
Cross-site Scripting (XSS)
2022-05-2609:45:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
25
0.001 Low
EPSS
Percentile
31.3%
limesurvey/limesurvey is vulnerable to cross-site scripting attacks. The vulnerability exists in the uploadConfirm.php due to a lack of input validation which allows an attacker to inject and execute arbitrary javascript or HTML.
| CPE | Name | Operator | Version |
|---|---|---|---|
| limesurvey/limesurvey | le | 5.3.6+220321 | |
| limesurvey/limesurvey | le | 5.3.6+220321 |
Related
osv
osv
CVE-2022-29710
2022-05-25 01:15:07
BIT-limesurvey-2022-29710
2024-03-06 10:55:57
cve
cve
CVE-2022-29710
2022-05-25 01:15:07
cvelist
cvelist
CVE-2022-29710
2022-05-24 23:56:15
prion
prion
Cross site scripting
2022-05-25 01:15:00
openvas
openvas
LimeSurvey <= 5.3.10 XSS Vulnerability
2022-05-30 00:00:00
nvd
nvd
CVE-2022-29710
2022-05-25 01:15:07