Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-17003
4.3
MEDIUMCVSS v2
Published
September 21, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.= 3.14.7NVD
RubyGems