Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-29710
6.1
MEDIUMCVSS v3
Published
May 25, 2022
CVSS v2
4.3 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scripts or HTML via a crafted plugin.
LimeSurvey/LimeSurvey
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.
GitHub🔥 LimeSurvey – A powerful, open-source survey platform. A free alternative to SurveyMonkey, Typeform, Qualtrics, and Google Forms, making it simple to create online surveys and forms with unmatched flexibility.<= 5.3.9NVD
LimeSurveyNuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses
NuGet GalleryLight weight client for getting session key, listing surveys, activating surveys and adding responses<= 5.3.9NVD
RubyGems