Description

An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity.

Remediation

References

CVE-2019-16174

Related Vulnerabilities

WordPress Plugin ActiveHelper LiveHelp Live Chat Multiple Cross-Site Scripting Vulnerabilities (3.1.0)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3179)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0245)

WordPress Plugin FAQs Manager Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.0)

WordPress Plugin Timetable and Event Schedule by MotoPress Unspecified Vulnerability (2.4.3)

Severity

High

Classification

CVE-2019-16174 CWE-611 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities