CVE-2021-42112

The "File upload question" functionality in LimeSurvey 3.x-LTS through 3.27.18 allows XSS in assets/scripts/modaldialog.js and assets/scripts/uploader.js

published October 8, 2021

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

The "File upload question" functionality in LimeSurvey 3.x-LTS through 3.27.18 allows XSS in assets/scripts/modaldialog.js and assets/scripts/uploader.js.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01530 · 74.5th percentile
Published
2021-10-08T20:45Z
EPSS history
Timeline
  • 08 OCT 20:45Z
    The "File upload question" functionality in LimeSurvey 3.x-LTS through 3.27.18 allows XSS in assets/scripts/modaldialog.js and assets/scripts/uploader.js
    cvelistv5