CVE-2020-25799

MEDIUM

LimeSurvey 3.21.1 - Stored Cross-Site Scripting in Quota Component

Title source: llm
STIX 2.1

Description

LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.

References (2)

Core 2

Scores

CVSS v3 5.4
EPSS 0.0070
EPSS Percentile 48.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
limesurvey/limesurvey 3.21.1
Published Dec 31, 2020
Tracked Since Feb 18, 2026