Miguel Gomez

**Name of the Vulnerable Software and Affected Versions** LimeSurvey Community Edition version 7.0.5 **Description** A stored cross-site scripting issue exists in the Survey Menu Entries administration page. An authenticated user with `global settings:read` permission can create a survey menu entry containing malicious data. This data is stored in the `surveymenu entries.data` field and subsequently inserted into a single-quoted HTML title attribute without proper encoding. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HumHub Community Edition versions 1.18.4 and 1.18.4-pl1 **Description** A stored Cross-Site Scripting (XSS) issue exists in the oEmbed confirmation rendering workflow. XSS is a flaw that allows an attacker to inject malicious scripts into content that is then served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HumHub Community Edition version 1.18.4 **Description** A reflected cross-site scripting issue exists in the Space membership-request workflow. An attacker can inject malicious button configuration into the `options` query-string parameter of the 'space/membership/request-membership-form' endpoint. By tricking an authenticated non-member into submitting the membership request form, the server returns JavaScript containing the attacker-controlled code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HumHub version 1.18.4 **Description** A stored cross-site scripting issue exists in the comment-deletion notification flow. A Space administrator can exploit this by deleting another user's comment and inserting HTML or JavaScript into the deletion reason when choosing to notify the original author. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LimeSurvey Community Edition version 7.0.5 **Description** An authenticated reflected cross-site scripting issue exists in the HTML editor popup endpoint. The `text` and `name` query parameters are processed using a blacklist sanitizer and subsequently rendered without context-appropriate output encoding. Cross-site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** Update LimeSurvey Community Edition to a version newer than 7.0.5. As a temporary mitigation, restrict access to the HTML editor popup endpoint.

**Name of the Vulnerable Software and Affected Versions** LimeSurvey Community Edition version 7.0.5 **Description** An authenticated SQL injection exists in the Central Participant Database (CPDB) workflow. This issue occurs during the process of copying survey participant tokens to the central participant list. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.