CVE-2017-18358

PoC —

CVSS 3.0

6.1 medium

EPSS

<1%p59

Published

Jan 15, 2019 (Jan 15, 2019)

Modified

Jun 17, 2026

Description

LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is mishandled in the admin panel.

Vendors: limesurvey
Products: limesurvey
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.