CVE-2026-115640

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...

CVE-2026-115640 LimeSurvey Community Edition 7.7.0 - Stored XSS in Central Participants blocklist control

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...

CVE-2026-115640

LimeSurvey Community Edition 7.7.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability within the Central Participants Database blocklist control. An authenticated user possessing the global participantpanel:import permission can import a CSV file where the participant_id contains ...

EUVD-2026-120750

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...

CVE-2026-115640: LimeSurvey LimeSurvey Community Edition: LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants…

LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participantid containing HTML. The import flow persists that...