Description (CNA)
An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted inline JavaScript literal without JavaScript-context encoding.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LimeSurvey / LimeSurvey | affected 7.4.0 |
CWE
CWE-79
References
- https://fluidattacks.com/advisories/golden
- https://github.com/LimeSurvey/LimeSurvey/
- https://github.com/LimeSurvey/LimeSurvey/commit/32e54f14f0b4ddc2d8144daaabf7e23c3bbfb8e8
ADP enrichment
No English description supplied.
No references supplied.