CVE-2018-20322

LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against…

published December 21, 2018

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against LimeSurvey administrators. Fixed in version 3.15.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01114 · 65.8th percentile
Published
2018-12-21T22:00Z
EPSS history
Timeline
  • 21 DEC 22:00Z
    LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against…
    cvelistv5