CVE-2026-115640

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...

EUVD-2026-120750

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...

CVE-2026-115640

LimeSurvey Community Edition 7.7.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability within the Central Participants Database blocklist control. An authenticated user possessing the global participantpanel:import permission can import a CSV file where the participant_id contains ...

CVE-2026-115640: LimeSurvey LimeSurvey Community Edition: LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants…

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...

CVE-2026-112860

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

CVE-2026-112862

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

EUVD-2026-108630

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

CVE-2026-112862

The Participants Database WordPress plugin (versions

CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

EUVD-2026-108629

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

CVE-2026-112862 WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

CVE-2026-112860 WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL Injection.This issue affects Participants Database: from n/a through 2.7.8.5...

CVE-2026-112860

The Participants Database plugin for WordPress (versions

WordPress Participants Database deserialization injection vulnerability

WordPress Participants Database versions 2.7.8.5 and earlier contain a deserialization injection vulnerability. This vulnerability arises from the deserialization of untrusted data, potentially leading to object injection...

WordPress Participants Database SQL injection vulnerability

WordPress Participants Database versions 2.7.8.5 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially leading to blind SQL injection...

WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Participants Database versions = 2.7.8.5...

PT-2026-121795

Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.6 Description Deserialization of untrusted data in the xnau webdesign Participants Database allows for Object Injection. This occurs when the application deserializes data from an untrusted source...

PT-2026-121794

Name of the Vulnerable Software and Affected Versions Participants Database versions prior to 2.7.8.6 Description An issue involving improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. Blind SQL Injection is a technique where an attacker asks the...