CVE-2024-28710

Publication date

2024-10-07 00:00:00

Family

mitre

State

PUBLISHED

Description

Cross Site Scripting vulnerability in LimeSurvey before 6.5.0+240319 allows a remote attacker to execute arbitrary code via a lack of input validation and output encoding in the Alert Widgets message component.