WS-2023-0227
Published:May 15, 2026
Updated:May 15, 2026
Stored XSS vulnerability in limesurvey/limesurvey
Affected Packages
limesurvey/limesurvey (PHP):
Affected version(s) =4.0.0-beta <4.0.0+200116Fix Suggestion:
Update to version 4.0.0+200116limesurvey/limesurvey (PHP):
Affected version(s) >=dev-answers-view <dev-basicFix Suggestion:
Update to version dev-basiclimesurvey/limesurvey (PHP):
Affected version(s) =dev-redo-13161 <dev-fix-14253Fix Suggestion:
Update to version dev-fix-14253limesurvey/limesurvey (PHP):
Affected version(s) >=3.0.2+180110 <3.4.0+180219Fix Suggestion:
Update to version 3.4.0+180219limesurvey/limesurvey (PHP):
Affected version(s) =dev-activator <dev-add-app-params-to-twigFix Suggestion:
Update to version dev-add-app-params-to-twiglimesurvey/limesurvey (PHP):
Affected version(s) =dev-survey-activator2 <dev-dependabot/npm_and_yarn/assets/packages/adminbasics/loader-utils-2.0.3Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/assets/packages/adminbasics/loader-utils-2.0.3limesurvey/limesurvey (PHP):
Affected version(s) =dev-fix-tests2 <dev-quota-remote-disable2Fix Suggestion:
Update to version dev-quota-remote-disable2limesurvey/limesurvey (PHP):
Affected version(s) =dev-fix-theme-help <dev-fix-typoFix Suggestion:
Update to version dev-fix-typolimesurvey/limesurvey (PHP):
Affected version(s) =dev-scrutinizer-patch-3 <dev-snyk-upgrade-f2061a8270a5579306cb12524f53a6d4Fix Suggestion:
Update to version dev-snyk-upgrade-f2061a8270a5579306cb12524f53a6d4limesurvey/limesurvey (PHP):
Affected version(s) =dev-master-innodb-fix <dev-model-findFix Suggestion:
Update to version dev-model-findlimesurvey/limesurvey (PHP):
Affected version(s) =dev-json-data <dev-kill-travisFix Suggestion:
Update to version dev-kill-travislimesurvey/limesurvey (PHP):
Affected version(s) =3.0.0-RC.1 <3.0.0-RC.2+171102Fix Suggestion:
Update to version 3.0.0-RC.2+171102limesurvey/limesurvey (PHP):
Affected version(s) =dev-develop-innodb <dev-display-import-errors-masterFix Suggestion:
Update to version dev-display-import-errors-masterlimesurvey/limesurvey (PHP):
Affected version(s) =dev-viewanswers <dev-snyk-upgrade-1eb5139e4072b633334be7fdb770a7d3Fix Suggestion:
Update to version dev-snyk-upgrade-1eb5139e4072b633334be7fdb770a7d3limesurvey/limesurvey (PHP):
Affected version(s) =dev-new-scrutinizer <dev-refactor-rc-checksessionFix Suggestion:
Update to version dev-refactor-rc-checksessionlimesurvey/limesurvey (PHP):
Affected version(s) =dev-fix-gitignore <dev-fix-model-relationsFix Suggestion:
Update to version dev-fix-model-relationsRelated Resources (1)
Do you need more information?
Contact UsCVSS v4
Base Score:
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
PASSIVE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
LOW
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
LOW