CVE-2026-15973

LimeSurvey Community Edition 7.0.5 is affected by a stored cross-site scripting (XSS) vulnerability in the Survey Menu Entries administration page. An authenticated user holding the global settings:read permission can create a survey menu entry containing attacker-controlled data, which is stored...