LimeSurvey 4.3.2 allows reflected XSS because application/controllers/LSBaseController.php lacks code to validate parameters.

Published Aug 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre