GCVE - cpe:2.3:a:limesurvey:limesurvey:4.1.12:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:limesurvey:limesurvey:4.1.12:-:*:*:*:*:*:*

part: a version: 4.1.12 update: -

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/limesurvey/limesurvey`	purl2cpe	2026-06-01 10:14:38.719690

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-11456`	vulnerable	2026-06-08 05:16:47.237435	Details available LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups). Published: 2020-04-01T15:48:08.000Z Updated: 2024-08-04T11:28:13.835Z Open on db.gcve.eu Reference links https://github.com/LimeSurvey/LimeSurvey/commit/04b118acce2a74306f365ef329cbe00efc399b26 http://packetstormsecurity.com/files/157114/LimeSurvey-4.1.11-Cross-Site-Scripting.html https://www.exploit-db.com/exploits/48289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-11455`	vulnerable	2026-06-08 05:16:47.236196	Details available LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. Published: 2020-04-01T15:48:18.000Z Updated: 2024-08-04T11:28:13.992Z Open on db.gcve.eu Reference links https://github.com/LimeSurvey/LimeSurvey/commit/daf50ebb16574badfb7ae0b8526ddc5871378f1b http://packetstormsecurity.com/files/157112/LimeSurvey-4.1.11-Path-Traversal.html https://www.exploit-db.com/exploits/48297	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.