Cross Site Scripting (XSS) vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate privileges via a crafted script to the generaloptionspanel.php component.
{ "cpes": [ "cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*" ], "severity": "Medium" }