medium6.1
CVE-2018-17003
In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/inser…
Impact
In LimeSurvey 3.14.7, HTML Injection and Stored XSS have been discovered in the appendix via the surveyls_title parameter to /index.php?r=admin/survey/sa/insert.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limesurvey | Limesurvey | Version 3.14.7 |