All products

limesurvey/limesurvey

Composer · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cross-site Scripting in LimeSurveyCVE-2019-16173 · GHSA-R5F2-4WF4-CV66 limesurvey/limesurvey Composer Medium Fix reported
Cross-site Scripting in LimeSurveyCVE-2019-16172 · GHSA-FR47-R224-C36M limesurvey/limesurvey Composer Medium Fix reported
LimeSurvey has a SQL Injection issueCVE-2026-50636 · GHSA-PR6F-87HF-HX24 limesurvey/limesurvey Composer High No fix reported
LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it.CVE-2026-50635 · GHSA-5C37-5J7W-8MH8 limesurvey/limesurvey Composer High No fix reported
LimeSurvey is vulnerable to SQL injectionCVE-2025-56421 · GHSA-RCCQ-2FXQ-7X3H limesurvey/limesurvey Composer High Fix reported
LimeSurvey Cross Site Scripting vulnerabilityCVE-2024-28709 · GHSA-C7XM-RWQJ-PGCJ limesurvey/limesurvey Composer Medium Fix reported
LimeSurvey Cross Site Scripting vulnerabilityCVE-2024-28710 · GHSA-632Q-77QJ-C89Q limesurvey/limesurvey Composer Medium Fix reported
Cross-site Scripting in LimesurveyCVE-2021-42112 · GHSA-H9PH-JCGH-GF69 limesurvey/limesurvey Composer Medium Fix reported