medium6.1
CVE-2017-18358
LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin pane…
Impact
LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limesurvey | Limesurvey | before 2.72.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/
- https://github.com/LimeSurvey/LimeSurvey/commit/700b20e2ae918550bfbf283f433f07622480978b
- https://blog.ripstech.com/2018/limesurvey-persistent-xss-to-code-execution/
- https://github.com/LimeSurvey/LimeSurvey/commit/700b20e2ae918550bfbf283f433f07622480978b