Skip to content
OpenAdvisories
Medium · 6.0 CVE-2026-18403 EUVD-2026-58786GHSA-fxx2-xm5f-gmf5

LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB

Published Aug 14, 2026 · Updated Aug 14, 2026 · Assigned by Fluid Attacks

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.

Affected products

VendorProductAffectedFixed
LimeSurvey LimeSurvey 7.0.5 —

References