Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LimeSurvey LimeSurvey

Default version status: unaffected

  • 7.0.5affected

References