CoreCVE
Back

HIGH

An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the js_localize.php function

Published Sep 3, 2024

Description

An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via injecting a crafted payload into the lng parameter of the js_localize.php function

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Sep 3, 2024
Updated Sep 3, 2024
Reserved Aug 5, 2024
Link CVE-2024-42902

CISA Vulnrichment

Updated Sep 3, 2024

NVD

Status Analyzed
Modified Jun 17, 2026
Link CVE-2024-42902

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Sep 3, 2024
Updated Sep 3, 2024
Link EUVD-2024-39818

GitHub

No data