CVE-2026-116645

LimeSurvey Community Edition 7.8.0 is vulnerable to an SQL injection vulnerability within the survey-archive participant import and SPSS-response export workflows. An authenticated user with the global surveys.create permission can exploit this by importing a specially crafted .lsa archive . This...

EUVD-2026-123101

LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global surveys.create permission can import a crafted .lsa archive whose participant XML creates an attacker-named...

CVE-2026-116645: LimeSurvey LimeSurvey Community Edition: LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and…

LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global surveys.create permission can import a crafted .lsa archive whose participant XML creates an attacker-named...

PT-2026-144942

LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global surveys.create permission can import a crafted .lsa archive whose participant XML creates an attacker-named...