CVE-2026-92730

LimeSurvey Community Edition 7.0.14 is vulnerable to a reflected cross-site scripting (XSS) flaw on the administrative survey-participant CSV import result page. The root cause is triggered via an invalid attribute column name . Exploitation details and specific remediation steps are not provided...

CVE-2026-92730 LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column name

LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page...

EUVD-2026-85521

LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page...

CVE-2026-18403: Improper Neutralization of Special Elements used in an SQL Command

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database CPDB workflow that copies survey participant tokens to the central participant list...