Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jfwm-3rx7-mcj8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

EPSS

Процентиль: 49%
0.00263
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
около 5 лет назад

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

CVSS3: 5.4
debian
около 5 лет назад

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add ...

EPSS

Процентиль: 49%
0.00263
Низкий

Дефекты

CWE-79