← All advisories

Critical severity9.8NVD Advisory· Published Jan 27, 2023· Updated Jun 17, 2026

CVE-2022-48008

CVE-2022-48008

Description

An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

4

Limesurvey/Limesurveycpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =5.4.15
Sakura 501/LimeSurvey-5.4.15-PluginUploadtoRCEllm-create
Range: =5.4.15
osv-coords
pkg:bitnami/limesurvey
Range: >= 5.4.15, < 5.4.16

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.