CVE-2026-115640

LimeSurvey Community Edition 7.7.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Central Participants Database (CPDB) blocklist control. An authenticated user with global participantpanel:import permissions can upload a CSV file where the participant_id contains HTML. ...