Sploitus

CVE-2020-11456

3 known exploits for CVE-2020-11456

LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).

Affected products
Limesurvey
Limesurvey
≤ 4.1.11, 4.1.12
Fix
Available
CVSS 3.1
5.4 MEDIUM
EPSS
70.8% (99th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2020-04-01
CVE-2020-11456 at NVD
Authoritative description, scoring and affected products

3 known exploits for CVE-2020-11456

Proof-of-concept code and exploit modules indexed by Sploitus

LimeSurvey 4.1.11 - (Survey Groups) Persistent Cross-Site Scripting Vulnerability
2020-04-06 Matthew AbereggZDT
LimeSurvey 4.1.11 - 'Survey Groups' Persistent Cross-Site Scripting
2020-04-06 Matthew AbereggEXPLOITDB
LimeSurvey 4.1.11 Cross Site Scripting
2020-04-06 Matthew AbereggPACKETSTORM