View Issue Details

This bug affects 1 person(s).
 0
IDProjectCategoryView StatusLast Update
19622Bug reportsOtherpublic2024-06-21 12:46
ReporterDenisChenu Assigned To 
PrioritynoneSeverityminor 
Status newResolutionopen 
Product Version6.5.x 
Summary19622: Mail system : bad Nmae search
Description

When there are < in the name of the super administrator email : can not send test email

Steps To Reproduce

Steps to reproduce

MLogi as super admin
Set you username to u <strong><img src=x onerror=alert('xss')> (replace the <)
Goes to admin/globalsettings#email
Clik on send test email

Expected result

Emaisl sent (or not) : but have email error

Actual result

Email test result
Email sending failure: You must provide at least one recipient email address.
Invalid address: (to): strong

TagsNo tags attached.
Attached Files
XssFullName (43 bytes)   
u <strong><img src=x onerror=alert('xss')>
XssFullName (43 bytes)   
Bug heat0
Complete LimeSurvey version number (& build)6.5.12
I will donate to the project if issue is resolvedNo
Browsernot relevantnn
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant

Users monitoring this issue

There are no users monitoring this issue.

Activities

Issue History

Date Modified Username Field Change
2024-06-21 12:46 DenisChenu New Issue
2024-06-21 12:46 DenisChenu File Added: Capture d’écran du 2024-06-21 12-35-25.png
2024-06-21 12:46 DenisChenu File Added: XssFullName