CVE-2026-18403

MEDIUM

CVE: CVE-2026-18403 - LimeSurvey Community Edition 7Sign in to save

CVSS

6.0

CVSS v4.0

EPSS

N/A

Exploit Prediction Score

Published

August 14, 2026

Exploitability

No EPSS data available

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.

Weaknesses

CWE-89

Affected Packages

No package data available.

Aliases

CVE-2026-18403

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://fluidattacks.com/es/advisories/rihanna
https://github.com/LimeSurvey/LimeSurvey/
https://github.com/LimeSurvey/LimeSurvey/commit/7735ce31cea1cad087b0c8556cb65a1c09e29cbd