VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Feb 12, 2013· Updated Apr 29, 2026

CVE-2011-5256

CVE-2011-5256

Description

Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379-20111116, when viewing survey results, allows remote attackers to inject arbitrary web script or HTML via unknown parameters.

Affected products

15
  • Limesurvey/Limesurvey15 versions
    cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <=1.91\+
    • cpe:2.3:a:limesurvey:limesurvey:1.01:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.50:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.52:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.53\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.70\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.71\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.72:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.80\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.81\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.82\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.85:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.86:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.87\+:*:*:*:*:*:*:*
    • cpe:2.3:a:limesurvey:limesurvey:1.90\+:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.