Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-25799
5.4
MEDIUMCVSS v3
Published
December 31, 2020
CVSS v2
3.5 LOW
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.= 3.21.1NVD
LimeSurveyNuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses
NuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses= 3.21.1NVD
RubyGems