Описание
A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user.
Уязвимые конфигурации
Конфигурация 1Версия до 6.15.12 (исключая)
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00227
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
debian
5 месяцев назад
A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions pri ...
CVSS3: 6.1
github
5 месяцев назад
A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/models/QuestionCreate.php. This allows an attacker to craft a malicious URL and compromise the logged in user.
EPSS
Процентиль: 13%
0.00227
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79