LimeSurvey: master 292d0f83

Diff Back to Repository
Author Committer Branch Timestamp Parent
c_schmitz c_schmitz master 2021-02-17 16:29 master 93658bf3
Changeset

Fixed issue: [security] Possible SQL injection in data entry, CPDB participant sharing and condition editing - found by James Mullen, Edgescan
Fixed issue: [security] Possible XSS in data entry and survey logic check - found by James Mullen, Edgescan
mod - application/controllers/admin/dataentry.php Diff File
mod - application/controllers/admin/participantsaction.php Diff File
mod - application/helpers/export_helper.php Diff File
mod - application/helpers/expressions/em_manager_helper.php Diff File
mod - application/models/Condition.php Diff File
mod - application/models/ParticipantShare.php Diff File