CVE-2014-5018

Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct…

published July 21, 2014

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting (XSS) attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01474 · 73.5th percentile
Published
2014-07-21T14:00Z
EPSS history
Timeline
  • 21 JUL 14:00Z
    Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct…
    cvelistv5