| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | = 1.49= 1.52≤ 1.70 |
Cross-site request forgery (CSRF) vulnerability in LimeSurvey (formerly PHPSurveyor) before 1.71 allows remote attackers to change arbitrary quotas as administrators via a "modify quota" action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free