| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | = 1.01= 1.50= 1.52= 1.53+= 1.70+= 1.71+= 1.72= 1.80+= 1.81+= 1.82+= 1.85= 1.86= 1.87+= 1.90+≤ 1.91\+ |
Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free