Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function.
References
| Link | Resource |
|---|---|
| https://bugs.limesurvey.org/bug_relationship_graph.php?bug_id=19364&graph=relation | Broken Link |
| https://www.exploit-db.com/exploits/51926 | Exploit Third Party Advisory |
| https://bugs.limesurvey.org/bug_relationship_graph.php?bug_id=19364&graph=relation | Broken Link |
| https://www.exploit-db.com/exploits/51926 | Exploit Third Party Advisory |
Configurations
History
30 Jan 2026, 21:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.limesurvey.org/bug_relationship_graph.php?bug_id=19364&graph=relation - Broken Link | |
| References | () https://www.exploit-db.com/exploits/51926 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:limesurvey:limesurvey:5.3.32:220817:*:*:*:*:*:* | |
| First Time |
Limesurvey
Limesurvey limesurvey |
21 Nov 2024, 08:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugs.limesurvey.org/bug_relationship_graph.php?bug_id=19364&graph=relation - | |
| References | () https://www.exploit-db.com/exploits/51926 - |
15 Aug 2024, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CWE | CWE-79 |
03 Apr 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-03 07:15
Updated : 2026-01-30 21:02
NVD link : CVE-2024-24506
Mitre link : CVE-2024-24506
CVE.ORG link : CVE-2024-24506
JSON object : View
Products Affected
limesurvey
- limesurvey
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')