Cross-site Scripting in LimeSurvey

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-16172 · ADVISORY
• LimeSurvey/LimeSurvey commit 32d6a52 · WEB
• seclists.org/bugtraq/2019/Sep/27 · WEB
• limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released · WEB
• packetstormsecurity.com/files/154479/LimeSurvey-3.17.13-Cross-Site-Scripting.html · WEB
• seclists.org/fulldisclosure/2019/Sep/22 · WEB

Lỗ hổng khác của limesurvey/limesurvey

• CVE-2026-50636CAO 8.8The RemoteControl API methods invite_participants and remind_participants pass a caller-supplied token-ID array into TokenDynamic::findUninv…
• CVE-2026-50635CAO 8.8LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optional allowedHost…
• CVE-2025-56421CAO 7.5SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.
• CVE-2024-28710TRUNG BÌNH 6.1Cross Site Scripting vulnerability in LimeSurvey before 6.5.0+240319 allows a remote attacker to execute arbitrary code via a lack of input …
• CVE-2024-28709TRUNG BÌNH 6.1Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted scrip…