VULNERABILITY INTELLIGENCE

CVE-2026-18403

EPSS probability0.38%
CISA KEVNot currently listed
Published2026-08-14
Last modified2026-08-28

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.

Weakness classification

  • help@fluidattacks.com: CWE-89

Primary references