Description

Cross-site scripting (XSS) vulnerability in the tooltips in LimeSurvey before 1.91+ Build 11379-20111116, when viewing survey results, allows remote attackers to inject arbitrary web script or HTML via unknown parameters.

Remediation

References

CVE-2011-5256

Related Vulnerabilities

MySQL CVE-2022-21333 Vulnerability (CVE-2022-21333)

PHP Other Vulnerability (CVE-2007-1649)

MySQL CVE-2016-3471 Vulnerability (CVE-2016-3471)

Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.21)

Severity

Low

Classification

CVE-2011-5256 CWE-707

Tags

Missing Update Known Vulnerabilities