Fluid Attacks' AI SAST Scanner

LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute

Corteza 2024.9.8 - SQL Injection in MSSQL JSON-path meta filter via incorrect T-SQL string escaping

HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover

Baserow 2.3.3 - SQL injection in formula index() JSONB array extraction

LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields

LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML editor popup

LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint

HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering

HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmation

HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason