← CVE Intelligence

CVE-2026-16809

LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering PUBLISHED

Description (CNA)

LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5.

Affected (CNA)

Vendor / productVersions
LimeSurvey / LimeSurveyaffected 7.0.5

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.