CVE-2020-23710: Limesurvey

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature.

Affected products

• Limesurvey Limesurvey: version 4.2.5 only

Published 2021-06-28. Last modified 2026-06-17.