← Database

CVE-2024-42902

HIGH CVSS: 8.8 Published: 2024-09-03 Modified: 2026-06-17

Description

An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the js_localize.php function

Affected Platforms

Limesurvey Limesurvey

Weakness Type

CWE-94

References