| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | = 2.05+ |
Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting (XSS) attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free