| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | = 1.01= 1.50= 1.52= 1.53+= 1.70+= 1.71+= 1.72= 1.80+= 1.81+= 1.82+= 1.85= 1.86= 1.87+= 1.90+≤ 1.91\+ |
Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379-20111116, when viewing survey results, allows remote attackers to inject arbitrary web script or HTML via unknown parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free