CVE-2018-16397

CVE-2018-16397

In LimeSurvey before 3.14.7, an admin user can leverage a "file upload" question to read an arbitrary file,

Source: CVE-2018-16397