Cross Site Scripting (XSS) vulnerability in LimeSurvey before version 6.2.9-230925 allows a remote attacker to escalate privileges via a crafted script to the generaloptionspanel.php component.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*" ] }