Description
LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.limesurvey.org/limesurvey-updates/2188-limesurvey-3-17-14-build-190902-released ↗
- https://github.com/LimeSurvey/LimeSurvey/commit/32d6a5224327b246ee3a2a08500544e4f80f9a9a ↗
- http://seclists.org/fulldisclosure/2019/Sep/22 ↗
- http://packetstormsecurity.com/files/154479/LimeSurvey-3.17.13-Cross-Site-Scripting.html ↗
- https://seclists.org/bugtraq/2019/Sep/27 ↗