Description
LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).
Remediation
References
Related Vulnerabilities
WordPress Plugin EZ SQL Reports Shortcode Widget and DB Backup Multiple Vulnerabilities (4.11.33)
Dolibarr Incorrect Authorization Vulnerability (CVE-2020-12669)
Elgg Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3733)
Oracle Application Server CVE-2009-0989 Vulnerability (CVE-2009-0989)
WordPress Plugin WordPress fancyBox Lightbox Cross-Site Scripting (1.0.1)