Reflected XSS Vulnerability in LimeSurvey by LimeSurvey Development Team
CVE-2020-16192

6.1MEDIUM

Key Information:

Vendor

Limesurvey

Status
Limesurvey
Vendor
CVE Published:
5 August 2020

What is CVE-2020-16192?

A reflected XSS vulnerability exists in LimeSurvey 4.3.2, allowing attackers to inject malicious scripts via unvalidated user input in application/controllers/LSBaseController.php. This oversight in parameter validation could enable unauthorized actions or data exposure when users interact with affected functionalities.

References

https://github.com/LimeSurvey/LimeSurvey/pull/1479/commit...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.