Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-25797

Опубликовано: 31 дек. 2020
Источник: debian
EPSS Низкий

Описание

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
limesurveyitppackage

EPSS

Процентиль: 49%
0.00263
Низкий

Связанные уязвимости

CVSS3: 5.4
nvd
около 5 лет назад

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

github
больше 3 лет назад

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

EPSS

Процентиль: 49%
0.00263
Низкий