LimeSurvey Community Edition vulnerabilities

2 known vulnerabilities in LimeSurvey Community Edition from LimeSurvey. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  LimeSurvey Community Edition: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-116645Nov 11, 2026LimeSurvey

  LimeSurvey Community Edition 7.8.0 contains an SQL injection vulnerability in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global surveys.create permission can import a crafted .lsa archive whose participa

• 7.4 High severity

  LimeSurvey Community Edition: Improper Neutralization of Input During Web Page Generation

  CVE-2026-115640Nov 10, 2026LimeSurvey

  LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants Database blocklist control. An authenticated user with only global participantpanel:import permission can import a CSV participant_id containing