CVE-2019-14512: XSS
First published: Mon Mar 16 2020(Updated: )
LimeSurvey 3.17.7+190627 has XSS via Boxes in application/extensions/PanelBoxWidget/views/box.php or a label title in application/views/admin/labels/labelview_view.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Limesurvey Limesurvey | =3.17.7\+190627 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this LimeSurvey vulnerability?
The vulnerability ID for this LimeSurvey vulnerability is CVE-2019-14512.
What is the severity of CVE-2019-14512?
The severity of CVE-2019-14512 is medium with a CVSS score of 6.1.
How does LimeSurvey 3.17.7+190627 have XSS?
LimeSurvey 3.17.7+190627 has XSS through Boxes in application/extensions/PanelBoxWidget/views/box.php or a label title in application/views/admin/labels/labelview_view.php.
How can I fix the XSS vulnerability in LimeSurvey 3.17.7+190627?
To fix the XSS vulnerability in LimeSurvey 3.17.7+190627, update to a version that includes the following commits: [commit link 1] and [commit link 2].
Where can I find more information about LimeSurvey?
You can find more information about LimeSurvey on the official LimeSurvey website [website link].
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/limesurvey
- canonical/limesurvey limesurvey
- version/limesurvey limesurvey/3.17.7\+190627