VULNERABILITY INTELLIGENCE
CVE-2026-16809
CVSS score7.2 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-08-26
Last modified2026-08-28
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N
Description
LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the survey quota creation workflow. An authenticated low-privileged user who can create and manage their own survey can store malicious JavaScript in a quota message. This issue affects LimeSurvey: 7.0.5.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')