CVE-2020-25799

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page

published December 31, 2020

CVSS
—
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00705 · 52.8th percentile
Published
2020-12-31T17:06Z
EPSS history
Timeline
  • 31 DEC 17:06Z
    LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page
    cvelistv5