Description

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel.

Remediation

References

CVE-2017-18358

Related Vulnerabilities

WildFly Application Server Uncontrolled Resource Consumption Vulnerability (CVE-2016-9589)

WordPress Plugin WP Activity Log Information Disclosure (3.1.1)

MySQL CVE-2014-6555 Vulnerability (CVE-2014-6555)

Oracle JRE CVE-2014-2421 Vulnerability (CVE-2014-2421)

Telerik Web UI Insufficiently Protected Credentials Vulnerability (CVE-2017-9248)

Severity

Medium

Classification

CVE-2017-18358 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities