Vulnerabilities in LimeSurvey

9 results

Vexday analysis

LimeSurvey apresenta um perfil de risco moderado com 7 vulnerabilidades registradas, sendo 1 crítica, porém sem evidência de exploração ativa no momento. A fraqueza dominante (CWE-835 - loop infinito) sugere problemas de controle de fluxo que podem impactar disponibilidade; o registro de 2 vulnerabilidades nos últimos 90 dias indica atividade de descoberta contínua que merece monitoramento.

CVE-2025-41375CRITICALSQL Injection in LimesurveyEPSS 0.6%CVE-2025-41376MEDIUMCRLF Injection in LimesurveyEPSS 0.5%CVE-2026-50635HIGHLimeSurvey Password Reset Host Header Injection Discloses Reset TokenEPSS 0.4%CVE-2026-50636HIGHLimeSurvey RemoteControl invite_participants/remind_participants SQL InjectionEPSS 0.4%CVE-2025-41075MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2025-41074MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2025-41076MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2020-36993MEDIUMLimeSurvey <= 4.3.10 - 'Survey Menu' Persistent Cross-Site ScriptingEPSS 0.2%CVE-2026-63107MEDIUMLimeSurvey SSRF via REST API Survey Template Host HeaderEPSS 0.2%