CVE-2022-48008

CRITICAL CVSS: 9.8 Published: 2023-01-27 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file.

Affected Platforms

Limesurvey Limesurvey

Weakness Type

CWE-434, CWE-434

References