VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 31, 2020· Updated Jun 17, 2026

CVE-2020-25797

CVE-2020-25797

Description

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Add Participants Function (First and last name parameters). When the survey participant being edited, e.g. by an administrative user, the JavaScript code will be executed in the browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Limesurvey/Limesurvey3 versions
    cpe:2.3:a:limesurvey:limesurvey:3.21.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:limesurvey:limesurvey:3.21.1:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: <3.21.1
  • osv-coords
    pkg:bitnami/limesurvey
    Range: >= 3.21.1, < 3.21.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.