{"action":"Upgrade limesurvey/limesurvey to 3.27.19 or later.","affected":[{"fixed":"3.27.19","introduced":"0"}],"component":"limesurvey/limesurvey","cve_ids":["CVE-2021-42112"],"ecosystem":"Packagist","epss":0.0153,"exploited":false,"fixed_versions":["3.27.19"],"ghsa_id":"GHSA-h9ph-jcgh-gf69","id":"tcs_01M5KF3HYX2J4D53QX12MR17FQ","modified_at":"2026-09-10T03:49:09.258285127Z","published_at":"2021-10-12T16:40:28Z","references":["https://osv.dev/vulnerability/GHSA-h9ph-jcgh-gf69","https://nvd.nist.gov/vuln/detail/CVE-2021-42112","https://github.com/LimeSurvey/LimeSurvey/pull/2044","https://github.com/LimeSurvey/LimeSurvey/commit/d56619a50cfd191bbffd0adb660638a5e438070d","https://bugs.limesurvey.org/view.php?id=17562","https://github.com/LimeSurvey/LimeSurvey","https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_limesurvey_-_cve-2021-42112.pdf"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-h9ph-jcgh-gf69","url":"https://osv.dev/vulnerability/GHSA-h9ph-jcgh-gf69"}],"summary":"Cross-site Scripting in Limesurvey"}