CVE-2020-16192: XSS
Published Aug 5, 2020
·Updated
LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters.
Affected Software
1 affected component
Limesurvey LimeSurvey=4.3.2
Remediation
Event History
Aug 5, 2020
CVE Published
via MITRE·03:05 PM
Data Sourced
via MITRE·03:05 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-16192.
2
What is the severity of CVE-2020-16192?
CVE-2020-16192 has a severity keyword of 'medium' and a severity value of 6.1.
3
How does CVE-2020-16192 impact LimeSurvey?
CVE-2020-16192 allows reflected XSS in LimeSurvey 4.3.2.
4
What is the affected software version of CVE-2020-16192?
The affected software version of CVE-2020-16192 is LimeSurvey 4.3.2.
5
How can CVE-2020-16192 be fixed?
To fix CVE-2020-16192, the code in application/controllers/LSBaseController.php should be updated to validate parameters.