| Package | Affected versions | Patched versions |
|---|---|---|
| limesurvey | ≤ 6.5.12 |
Lime Survey <= 6.5.12 is vulnerable to Cross Site Request Forgery (CSRF). The YII_CSRF_TOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free