Security Advisory

CVE-2018-20322

6.1
MEDIUM

Vulnerability Description

LimeSurvey version 3.15.5 contains a Cross-site scripting (XSS) vulnerability in Survey Resource zip upload, resulting in Javascript code execution against LimeSurvey administrators. Fixed in version 3.15.6.
Published Date December 21, 2018
Official Source NIST NVD Advisory