← Back to CVE List

CVE-2024-42902

Published: 2024-09-03T18:15Z
Last Modified: 2024-09-03T19:40Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the js_localize.php function > MITRE Terms of Use apply – see LICENSE‑MITRE.txt