exploitDog

CVE-2024-24506

Опубликовано: 03 апр. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function.

Ссылки

https://bugs.limesurvey.org/bug_relationship_graph.php?bug_id=19364&graph=relation
Broken Link
https://www.exploit-db.com/exploits/51926
Exploit
Third Party Advisory
https://bugs.limesurvey.org/bug_relationship_graph.php?bug_id=19364&graph=relation
Broken Link
https://www.exploit-db.com/exploits/51926
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:limesurvey:limesurvey:5.3.32:220817:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00366

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVE-2024-24506

CVSS3: 6.1

debian

почти 2 года назад

Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edit ...

GHSA-597x-4hfr-67c4

CVSS3: 6.1

github

почти 2 года назад

Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function.

EPSS

Процентиль: 58%

0.00366

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79