CVE-2025-70797

The Limesurvey online survey tool (v.6.15.20+251021) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. A remote attacker can inject malicious scripts by exploiting the Box[title] and box[url] parameters. If executed in a user's browser...