CVE-2020-23710: XSS
First published: Mon Jun 28 2021(Updated: )
Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Limesurvey Limesurvey | =4.2.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-23710?
CVE-2020-23710 is a Cross Site Scripting (XSS) vulnerability in LimeSurvey 4.2.5.
How severe is CVE-2020-23710?
CVE-2020-23710 has a severity rating of 5.4 (medium).
How does CVE-2020-23710 affect LimeSurvey 4.2.5?
CVE-2020-23710 affects LimeSurvey 4.2.5 through a Cross Site Scripting (XSS) vulnerability.
How can I fix the Cross Site Scripting (XSS) vulnerability in LimeSurvey 4.2.5?
To fix the Cross Site Scripting (XSS) vulnerability in LimeSurvey 4.2.5, apply the necessary patches recommended by the vendor or upgrade to a secure version.
Where can I find more information about CVE-2020-23710?
More information about CVE-2020-23710 can be found at the following link: [GitHub Pull Request](https://github.com/LimeSurvey/LimeSurvey/pull/1441#partial-pull-merging)
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/tags
- vendor/limesurvey
- canonical/limesurvey limesurvey
- version/limesurvey limesurvey/4.2.5