CVE-2019-16173

LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin

published September 9, 2019

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This occurs in application/core/Survey_Common_Action.php,

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03674 · 89.6th percentile
Published
2019-09-09T18:23Z
EPSS history
Timeline
  • 09 SEP 18:23Z
    LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin
    cvelistv5