← CVE Intelligence

CVE-2026-15973

LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries PUBLISHED

Description (CNA)

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user with the global settings:read permission can create a survey menu entry containing attacker-controlled data. The value is stored in the surveymenu_entries.data field and later inserted into a single-quoted HTML title attribute without context-appropriate encoding. This issue affects LimeSurvey: 7.0.5.

Affected (CNA)

Vendor / productVersions
LimeSurvey / LimeSurveyaffected 7.0.5

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.