MEDIUM6.1

GHSA-c7xm-rwqj-pgcj

LimeSurvey Cross Site Scripting vulnerability

Quick fix

GHSA-c7xm-rwqj-pgcj — limesurvey/limesurvey: upgrade to the fixed version with the command below.

composer require limesurvey/limesurvey:^6.5.12

Details

Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/limesurvey/limesurvey

Introduced in: 0Fixed in: 6.5.12

Fixcomposer require limesurvey/limesurvey:^6.5.12

References

https://nvd.nist.gov/vuln/detail/CVE-2024-28709[ADVISORY]
https://github.com/LimeSurvey/LimeSurvey/commit/c844c4fba81cc26ffe6544bf095bad6252910bc0[WEB]
https://github.com/LimeSurvey/LimeSurvey[PACKAGE]
https://www.limesurvey.org[WEB]
http://limesurvey.com[WEB]