Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5cw5-4v8j-xgrw

Опубликовано: 09 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user.

A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user.

EPSS

Процентиль: 13%
0.00227
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
5 месяцев назад

A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user.

CVSS3: 6.1
debian
5 месяцев назад

A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions pri ...

EPSS

Процентиль: 13%
0.00227
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79