Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-65930

LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LimeSurvey LimeSurvey

Default version status: unaffected

  • 7.0.5affected

References