Description
LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Dev Powers:ACF Color Coded Field Types Security Bypass (1.0)
WordPress Plugin PowerPress Podcasting by Blubrry Arbitrary File Upload (8.3.7)
WordPress Plugin Simple Link Directory PHP Object Injection (5.5.0)
WordPress Plugin 10Web Map Builder for Google Maps Security Bypass (1.0.63)
WordPress Plugin Simple Business Directory with Maps PHP Object Injection (3.6.0)