CVE-2026-92730 — LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column name

CVE-2026-92730

LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column name PUBLISHED

Description (CNA)

LimeSurvey Community Edition 7.0.14 contains a reflected cross-site scripting vulnerability on the administrative survey-participant CSV import result page.

Affected (CNA)

Vendor / product	Versions
LimeSurvey / LimeSurvey	affected 7.0.14

CWE

CWE-79

References

https://fluidattacks.com/es/advisories/camisa
https://github.com/LimeSurvey/LimeSurvey/
https://github.com/LimeSurvey/LimeSurvey/commit/0523de7bbb0282af33a0bf9e08a1fc6333ae6851

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.