system
Describe <CVE-2019-16172>.
user
What is <CVE-2019-16172>?
assistant
LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion..