Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wv52-h9cj-cvvw

Опубликовано: 02 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.2

Описание

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted inline JavaScript literal without JavaScript-context encoding.

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted inline JavaScript literal without JavaScript-context encoding.

7.2 High

CVSS4

Дефекты

CWE-79

7.2 High

CVSS4

Дефекты

CWE-79