← All advisories

Unrated severityNVD Advisory· Published Aug 5, 2020· Updated Aug 4, 2024

CVE-2020-16192

CVE-2020-16192

Description

LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters.

Affected products

3

LimeSurvey/LimeSurveydescription
Limesurvey/Limesurveyllm-fuzzy
Range: = 4.3.2
osv-coords
pkg:bitnami/limesurvey
Range: >= 4.3.2, < 4.3.3

Patches

Vulnerability mechanics

References

1

github.com/LimeSurvey/LimeSurvey/pull/1479/commits/4109a8d157e46c48ca34b995ef61a6e0f6905236mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.