Description
LimeSurvey 3.21.1 is affected by cross-site scripting (XSS) in the Quota component of the Survey page. When the survey quota being viewed, e.g. by an administrative user, the JavaScript code will be executed in the browser.
Remediation
References
Related Vulnerabilities
Ruby on Rails CVE-2024-28103 Vulnerability (CVE-2024-28103)
WordPress Plugin WP SlackSync Information Disclosure (1.8.5)
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.22)
WordPress Plugin Conditional Marketing Mailer for WooCommerce Cross-Site Request Forgery (1.5.2)
WordPress Plugin Add Link to Facebook Multiple Cross-Site Scripting Vulnerabilities (1.215)