| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | ≤ 4.3.10 |
LimeSurvey 4.3.10 contains a stored cross-site scripting vulnerability in the Survey Menu functionality of the administration panel. Attackers can inject malicious SVG scripts through the Surveymenu[title] and Surveymenu[parent_id] parameters to execute arbitrary JavaScript in administrative contexts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free