Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-22607
6.1
MEDIUMCVSS v3
Published
June 28, 2021
CVSS v2
4.3 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.= 4.1.11+200316NVD
LimeSurveyNuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses
NuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses= 4.1.11+200316NVD
RubyGems