CVE-2024-24506: XSS
Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24506?
CVE-2024-24506 is rated as a medium severity vulnerability due to its potential for remote code execution through cross-site scripting.
How do I fix CVE-2024-24506?
To fix CVE-2024-24506, upgrade to a patched version of Lime Survey Community Edition that addresses the XSS vulnerability.
What impact does CVE-2024-24506 have on Lime Survey?
CVE-2024-24506 allows an attacker to execute arbitrary code by exploiting the Administrator email address parameter in the General Setting function.
Who is affected by CVE-2024-24506?
CVE-2024-24506 affects users of Lime Survey Community Edition Version v.5.3.32+220817 and earlier versions.
Is CVE-2024-24506 an easy vulnerability to exploit?
CVE-2024-24506 can be exploited easily by remote attackers with knowledge of the system configuration.