CVEs-PoC/2021/CVE-2021-42112.md

CVE-2021-42112

Description

The "File upload question" functionality in LimeSurvey 3.x-LTS through 3.27.18 allows XSS in assets/scripts/modaldialog.js and assets/scripts/uploader.js.

POC

Reference

• https://www.on-x.com/sites/default/files/on-x_-security_advisory-limesurvey-_cve-2021-42112.pdf

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection