CVE-2026-16809 in LimeSurveyinformazioni

Riassunto

di MITRE • 27/08/2026

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message.

This issue affects LimeSurvey: 7.0.5.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Fluid Attacks

Prenotare

23/07/2026

Divulgazione

27/08/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Settore

Education

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-16809
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-16809
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-16809/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!