Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.
Medium CVSS 6.1
Summary
Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://gist.github.com/masquerad3r/772ddbfbd9fd95754f4873bcb202146d Exploit
- https://github.com/LimeSurvey/LimeSurvey/pull/4356 Issue Tracking
Timeline
- nvd_ingest NVD