Vulnerabilidades en LimeSurvey
18 resultadosAnálisis Vexday
LimeSurvey apresenta um perfil de risco moderado com 7 vulnerabilidades registradas, sendo 1 crítica, porém sem evidência de exploração ativa no momento. A fraqueza dominante (CWE-835 - loop infinito) sugere problemas de controle de fluxo que podem impactar disponibilidade; o registro de 2 vulnerabilidades nos últimos 90 dias indica atividade de descoberta contínua que merece monitoramento.
CVE-2026-50635HIGHLimeSurvey Password Reset Host Header Injection Discloses Reset TokenEPSS 0.7%CVE-2025-41375CRITICALSQL Injection in LimesurveyEPSS 0.6%CVE-2026-50636HIGHLimeSurvey RemoteControl invite_participants/remind_participants SQL InjectionEPSS 0.6%CVE-2026-63361HIGHLimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML editor popupEPSS 0.5%CVE-2025-41376MEDIUMCRLF Injection in LimesurveyEPSS 0.5%CVE-2026-63360HIGHLimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpointEPSS 0.5%CVE-2026-65930MEDIUMLimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fieldsEPSS 0.4%CVE-2026-65931MEDIUMLimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpointEPSS 0.4%CVE-2026-92730HIGHLimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column nameEPSS 0.4%CVE-2026-91775HIGHLimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warningsEPSS 0.4%CVE-2026-18403MEDIUMLimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDBEPSS 0.4%CVE-2026-63107MEDIUMLimeSurvey SSRF via REST API Survey Template Host HeaderEPSS 0.4%CVE-2025-41075MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2025-41074MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2020-36993MEDIUMLimeSurvey <= 4.3.10 - 'Survey Menu' Persistent Cross-Site ScriptingEPSS 0.3%CVE-2025-41076MEDIUMMultiple vulnerabilities in LimesurveyEPSS 0.3%CVE-2026-15973HIGHLimeSurvey 7.0.5 - Stored XSS in Survey Menu EntriesEPSS 0.3%CVE-2026-16809HIGHLimeSurvey Community Edition 7.0.5 - Stored XSS in quota message renderingEPSS 0.2%