Medium severity6.1OSV Advisory· Published Dec 21, 2018· Updated Jun 17, 2026
CVE-2018-20322
CVE-2018-20322
Description
LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against LimeSurvey administrators. Fixed in version 3.15.6.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …+ 2 more
- (no CPE)range: 1.45a, 1.45a_2007-02-24, 1.50_2007-08-06, …
- cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <=3.15.5
- (no CPE)range: <3.15.6
Patches
Vulnerability mechanics
References
2- github.com/LimeSurvey/LimeSurvey/commit/bfee69edaa0b90f97dc2d8fab09a87958cb32405nvdPatchThird Party Advisory
- bugs.limesurvey.org/view.phpnvdIssue TrackingPermissions RequiredVendor Advisory
News mentions
0No linked articles in our index yet.