Unrated severityNVD Advisory· Published Dec 31, 2020· Updated Aug 4, 2024

CVE-2020-25799

Description

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LimeSurvey/LimeSurveydescription
Limesurvey/Limesurveyllm-fuzzy
Range: = 3.21.1
osv-coords
pkg:bitnami/limesurvey
Range: >= 3.21.1, < 3.21.2

Patches

Vulnerability mechanics

References

bugs.limesurvey.org/view.phpmitrex_refsource_MISC
github.com/LimeSurvey/LimeSurvey/commit/a5f317817da4577d9ff457fea9c96482b3d1df23mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000