Cross Site Scripting (XSS) vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate privileges via a crafted script to the generaloptionspanel.php component.
{
"severity": "Medium",
"cpes": [
"cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*"
]
}