HIGH 7.2 NVD

CVE-2026-16809

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged u

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5.

References

https://fluidattacks.com/es/advisories/wellerman
https://github.com/LimeSurvey/LimeSurvey

Published: 2026-08-26 · Source: NVD · Feed updated: 2026-08-26

This high severity vulnerability with a CVSS score of 7.2 was published on 2026-08-26 via NVD.

vulnfeed aggregates 11128 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.