| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 14728 | Bug reports | Security | public | 2019-04-03 11:23 | 2019-04-30 09:13 |
| Reporter | bewi | Assigned To | DenisChenu | ||
| Priority | none | Severity | partial_block | ||
| Status | closed | Resolution | fixed | ||
| Product Version | 3.17.x | ||||
| Fixed in Version | 3.17.x | ||||
| Summary | 14728: Persistent XSS for question groups | ||||
| Description | for survey groups you can insert HTML code in the fields 'title' and 'description' which is shown on the survey list/ survey group list | ||||
| Steps To Reproduce | LimeSurvey - 07 - update survey group.png LimeSurvey - 08 - survey list.png LimeSurvey - 09 - survey list.png | ||||
| Tags | No tags attached. | ||||
| Bug heat | 256 | ||||
| Complete LimeSurvey version number (& build) | 3.17.0 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | |||||
| Database type & version | mysql | ||||
| Server OS (if known) | |||||
| Webserver software & version (if known) | |||||
| PHP Version | 7.2 | ||||
 |
the code in the field 'title' even get executed in the Frontend if you preview a question of that group LimeSurvey - 10 - survey preview.png (24,029 bytes) |
 |
Fixed in https://github.com/LimeSurvey/LimeSurvey/commit/b378cb000966cd47620be22f31a63dfb3e72c4b1 I can not reproduce for LimeSurvey - 10 - survey preview : are you sure it's not another test ? |
|
|
Sorry, that "Hu" came from the field "Description" in a "question group" and this ticket is about "survey group" (I made a mistake in the field "summary" of this ticket). |
|
|
OK, thanks again. |
 |
Fixed in version 3.17.3 |
