CVE-2012-4995

Published: Sep 19, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in admin/userrighthandling.php in LimeSurvey before 1.91+ Build 120224 allows remote attackers to inject arbitrary web script or HTML via the full_name parameter in a moduser action to admin/admin.php. NOTE: some of these details are obtained from third party information.

Affected (15)

Products: Limesurvey: Limesurvey

Limesurvey

1 product

Limesurvey

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Limesurvey Limesurvey	Up to 1.91\+
Limesurvey Limesurvey	Version 1.01
Limesurvey Limesurvey	Version 1.50
Limesurvey Limesurvey	Version 1.52
Limesurvey Limesurvey	Version 1.53+
Limesurvey Limesurvey	Version 1.70+
Limesurvey Limesurvey	Version 1.71+
Limesurvey Limesurvey	Version 1.72
Limesurvey Limesurvey	Version 1.80+
Limesurvey Limesurvey	Version 1.81+
Limesurvey Limesurvey	Version 1.82+
Limesurvey Limesurvey	Version 1.85
Limesurvey Limesurvey	Version 1.86
Limesurvey Limesurvey	Version 1.87+
Limesurvey Limesurvey	Version 1.90+