Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-18358
4.3
MEDIUMCVSS v2
Published
January 15, 2019
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.< 2.72.4NVD
RubyGems