Description
Limesurvey before 3.17.14 uses an anti-CSRF cookie without the HttpOnly flag, which allows attackers to access a cookie value via a client-side script.
Remediation
References
Related Vulnerabilities
WordPress Plugin Sell Downloads Arbitrary File Disclosure (1.0.1)
Microsoft SQL Server Other Vulnerability (CVE-2000-1082)
WordPress Plugin Royal Gallery Cross-Site Scripting (2.0)
MySQL CVE-2020-2903 Vulnerability (CVE-2020-2903)
WordPress Plugin PICA Photo Gallery 'imgname' Parameter Information Disclosure (1.0)