critical9.8
CVE-2019-25019
LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.
Impact
LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Limesurvey | Limesurvey | before 3.19.0 Version 4.0.0 |