Unrated severityNVD Advisory· Published Dec 31, 2020· Updated Aug 4, 2024

CVE-2020-25799

Description

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.

Affected products

LimeSurvey/LimeSurveydescription
osv-coords
pkg:bitnami/limesurvey
Range: >= 3.21.1, < 3.21.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

bugs.limesurvey.org/view.phpmitrex_refsource_MISC
github.com/LimeSurvey/LimeSurvey/commit/a5f317817da4577d9ff457fea9c96482b3d1df23mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000