[ Vendor · 4 CVEs ]
LimeSurvey
CVEs affecting LimeSurvey published in the last 30 days, plus any LimeSurvey CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102626 | 2 Oct 2026 | CVSS 7.2 | LimeSurveyAn authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the… | |
| CVE-2026-97685 | 29 Sep 2026 | CVSS 7.1 | LimeSurveyAn authenticated LimeSurvey Community Edition 7.3.0 user allowed to create surveys can use their own survey as an authorized context while supplying… | |
| CVE-2026-92730 | 23 Sep 2026 | CVSS 7.4 | LimeSurveyLimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import… | |
| CVE-2026-91775 | 23 Sep 2026 | CVSS 7.4 | LimeSurveyLimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import… |